PCNSE Exam Results

Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0 Questions and Answers

Question 41

An engineer needs to configure a standardized template for all Panorama-managed firewalls. These settings will be configured on a template named "Global" and will be included in all template stacks.

Which three settings can be configured in this template? (Choose three.)

Options:

Log Forwarding profile

SSL decryption exclusion

Email scheduler

Dynamic updates

Question 42

What are the two behavior differences between Highlight Unused Rules and the Rule Usage Hit counter when a firewall is rebooted? (Choose two.)

Options:

Rule Usage Hit counter will not be reset

Highlight Unused Rules will highlight all rules.

Highlight Unused Rules will highlight zero rules.

Rule Usage Hit counter will reset.

Question 43

In which two scenarios is it necessary to use Proxy IDs when configuring site-to-site VPN tunnels? (Choose two.)

Options:

Remote device is a non-Palo Alto Networks firewall.

The remote device is a Palo Alto Networks firewall.

Firewalls that only support policy-based VPNs.

Firewalls that only support route-based VPNs.

Question 44

What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 10.1 version?

Options:

Panorama cannot be reverted to an earlier PAN-OS release if variables are used in templates or template stacks.

An administrator must use the Expedition tool to adapt the configuration to the pre-PAN-OS 10.1 state.

When Panorama is reverted to an earlier PAN-OS release, variables used in templates or template stacks will be removed automatically.

Administrators need to manually update variable characters to those used in pre-PAN-OS 8.1.

Month End Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0 Questions and Answers

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce