PCNSC Online Practice Questions and Answers

Refer to the exhibit.

A web server in the DMZ is being mapped to a public address through DNAT. Which Security policy rule will allow traffic to flow to the web server?

A. Untrust (any) to Untrust (10. 1.1. 100), web browsing -Allow

B. Untrust (any) to Untrust (1. 1. 1. 100), web browsing -Allow

C. Untrust (any) to DMZ (1. 1. 1. 100), web browsing -Allow

D. Untrust (any) to DMZ (10. 1. 1. 100), web browsing -Allow

Which action would enables the firewalls to send their preexisting logs to Panorama?

A. A CLI command will forward the pre-existing logs to Panorama.

B. Use the import option to pull logs panorama.

C. Use the ACC to consolidate pre-existing logs.

D. The- log database will need to be exported from the firewall and manually imported into Panorama.

Which processing order will be enabled when a panorama administrator selects the setting "Objects defined in ancestors will takes higher precedence?

A. Descendant objects, will take precedence over ancestor objects.

B. Ancestor will have precedence over descendant objects.

C. Ancestor objects will have precedence over other ancestor objects.

D. Descendant object will take precedence over other descendant objects.

Which feature prevents the submission of corporate login information into website forms?

A. credential submission prevention

B. file blocking

C. User-ID

D. data filtering

When is the content inspection performed in the packet flow process?

A. after the SSL Proxy re-encrypts the packet

B. before the packet forwarding process

C. after the application has been identified

D. before session lookup

An administrator needs to optimize traffic to prefer business-critical applications over non-critical applications.

QoS natively integrates with which feature to provide service quality?

A. port inspection

B. certification revocation

C. Content-ID

D. App-ID

Which virtual router feature determines if a specific destination IP address is reachable'?

A. Ping-Path

B. Path Monitoring

C. Failover

D. Heartbeat Monitoring

A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch it connect.

How would an administrator configure the interface to IGbps?

A. set deviceconfig system speed-duplex 10Gbps-full-duplex

B. set deviceconfig interface speed-duplex 1Gbs--full-duplex

C. set deviceconfig interface speed-duplex 1Gbs--half-duplex

D. set deviceconfig system speed-duplex 1Gbs--half-duplex.

Which DoS protection mechanism detects and prevents session exhaustion attacks?

A. TCP Port Scan Protection

B. Flood Protection

C. Resource Protection

D. Pocket Based Attack Protection

An administrator accidentally closed the commit window/screen before the commit was finished. Which two options could the administrator use to verify the progress or success of that commit task? (Choose two.)

A. Option A

B. Option B

C. Option C

D. Option D