PCNSE Questions Bank

Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0 Questions and Answers

Question 5

An administrator has been tasked with configuring decryption policies,

Which decryption best practice should they consider?

Options:

Consider the local, legal, and regulatory implications and how they affect which traffic can be decrypted.

Decrypt all traffic that traverses the firewall so that it can be scanned for threats.

Place firewalls where administrators can opt to bypass the firewall when needed.

Create forward proxy decryption rules without Decryption profiles for unsanctioned applications.

Question 6

A firewall administrator is changing a packet capture filter to troubleshoot a specific traffic flow. Upon opening the newly created packet capture, the administrator still sees traffic for the previous filter.

What can the administrator do to limit the captured traffic to the newly configured filter?

Options:

In the GUI under Monitor > Packet Capture > Manage Filters, under Ingress Interface, select an interface.

Command line: > debug dataplane packet-diag clear filter all

In the GUI under Monitor > Packet Capture > Manage Filters, under the Non-IP field, select "exclude."

Command line: > debug dataplane packet-diag clear filter-marked-session all

Question 7

An administrator is troubleshooting intermittent connectivity problems with a user's GlobalProtect connection. Packet captures at the firewall reveal missing UDP packets, suggesting potential packet loss on the connection. The administrator aims to resolve the issue by enforcing an SSL tunnel over TCP specifically for this user.

What configuration change is necessary to implement this troubleshooting solution for the user?

Options:

Enable SSL tunnel within the GlobalProtect gateway remote user's settings.

Modify the user's client to prioritize UDP traffic for GlobalProtect.

Enable SSL tunnel over TCP in a new agent configuration for the specific user.

Increase the user's VPN bandwidth allocation in the GlobalProtect settings.

Question 8

View the screenshots

A QoS profile and policy rules are configured as shown. Based on this information which two statements are correct?

Options:

SMTP has a higher priority but lower bandwidth than Zoom.

DNS has a higher priority and more bandwidth than SSH.

google-video has a higher priority and more bandwidth than WebEx.

Facetime has a higher priority but lower bandwidth than Zoom.

Month End Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0 Questions and Answers

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce