Palo-Alto-Networks PCNSE-PAN-OS-10.0 Practice Exam Questions

Palo-Alto-Networks PCNSE-PAN-OS-10.0 Sample Question Answers

Question # 1

What are the advantages of using SAP Commerce Cloud in the Public Cloud? Note: There are 3 correct Answer to this question 

A. Security and compliance, for example disaster recovery and backup and more  
B. Regular upgrades of the underlying SAP Commerce Cloud core  
C. Support services from our 24 support teams  
D. Compatibility with older version of SAP Commerce, such as 6.X  
E. Flexibility of installing any third party software application  

Show Answer

Question # 2

An administrator wants to enable WildFire inline machine learning. Which three file types doesWildFire inline ML analyze? (Choose three.)

A. MS Office 
B. ELF 
C. APK 
D. VBscripts 
E. Powershell scripts 

Show Answer

Question # 3

An engineer must configure the Decryption Broker feature. To which router must the engineer assignthe decryption forwarding interfaces that are used in Decryption Broker security chain?

A. A virtual router that has no additional interfaces for passing data-type traffic and no other configured routes than those used for the security chain.
B. The default virtual router. If there is no default virtual router , the engineer must create one during setup.
C. A virtual router that is configured with at least one dynamic routing protocol and has at least one entry in the RIB
D. The virtual router that routes the traffic that the Decryption Broker security chain inspects.

Show Answer

Question # 4

Which CLI command displays the physical media that are connected to ethernet1?

A. > show system state filter-pretty sys.si.p8.stats
B. > show system state filter-pretty sys.sl.p8.phy
C. > show interface ethernet1 
D. > show system state filter-pretty sys.sl.p8.med

Show Answer

Question # 5

A firewall administrator is investigating high packet buffer utilization in the company firewall. Afterlooking at the threat logs and seeing many flood attacks coming from a single source that aredropped a by the firewall, the administrator decides to enable packet butter protection to protectagainst similar attacks.The administrator enables packet buffer protection globally in the firewall but still sees a high packetbuffer utilization rate.What else should the administrator do to stop packet buffers from being overflowed?

A. Add the default Vulnerability Protection profile to all security rules that allow traffic from outside
B. Enable packet buffer protection for the affected zones
C. Add a Zone Protection profile to the affected zones. 
D. Apply DOS profile to security rules allow traffic from outside.

Show Answer

Question # 6

Which three multi-factor authentication methods can be used to authenticate access to the firewall? (Choose three.) 

A. One-time password 
B. User certificate 
C. Voice 
D. SMS 
E. Fingerprint 

Show Answer

Question # 7

Which GlobalProtect gateway selling is required to enable split-tunneling by access route,destination domain, and application?

A. No Direct Access to local networks 
B. Tunnel mode 
C. iPSec mode 
D. Satellite mode 

Show Answer

Question # 8

Which log type will help the engineer verify whether packet buffer protection was activated?

A. Data Filtering 
B. Configuration 
C. Threat 
D. Traffic

Show Answer

Question # 9

An engineer discovers the management interface is not routable to the User-ID agentWhat configuration is needed to allow the firewall to communicate to the User-ID agent?

A. Create a NAT policy for the User-ID agent server
B. Add a Policy Based Forwarding (PBF) policy to the User-ID agent IP
C. Create a custom service route for the UID Agent
D. Add a static route to the virtual router

Show Answer

Question # 10

Which three methods are supported for split tunneling in the GlobalProtect Gateway? (Choosethree.)

A. Video Streaming Application 
B. Destination Domain 
C. Client Application Process 
D. Source Domain 
E. URL Category 

Show Answer