PCNSE8 Online Practice Questions and Answers

Which two methods can be configured to validate the revocation status of a certificate? (Choose two.)

A. CRL

B. CRT

C. OCSP

D. Cert-Validation-Profile

E. SSL/TLS Service Profile

Refer to the exhibit.

An administrator cannot see any of the Traffic logs from the Palo Alto Networks NGFW on Panorama reports. The configuration problem seems to be on the firewall. Which settings, if configured incorrectly, most likely would stop only Traffic logs from being sent from the firewall to Panorama?

A. Option A

B. Option B

C. Option C

D. Option D

An administrator creates an SSL decryption rule decrypting traffic on all ports. The administrator also creates a Security policy rule allowing only the applications DNS, SSL, and web-browsing. The administrator generates three encrypted

BitTorrent connections and checks the Traffic logs. There are three entries. The first entry shows traffic dropped as application Unknown. The next two entries show traffic allowed as application SSL.

Which action will stop the second and subsequent encrypted BitTorrent connections from being allowed as SSL?

A. Create a decryption rule matching the encrypted BitTorrent traffic with action "No-Decrypt," and place the rule at the top of the Decryption policy.

B. Create a Security policy rule that matches application "encrypted BitTorrent" and place the rule at the top of the Security policy.

C. Disable the exclude cache option for the firewall.

D. Create a Decryption Profile to block traffic using unsupported cyphers, and attach the profile to the decryption rule.

The firewall determines if a packet is the first packet of a new session or if a packet is part of an existing session using which kind of match?

A. 5-tuple match Source IP Address, Destination IP Address, Source Port, Destination Port, Protocol

B. 7-tuple match Source IP Address, Destination IP Address, Source Port, Destination Port ,Source User, URL Category and Source Security Zone.

C. 6-tuple match Source IP Address, Destination IP Address, Source Port, Destination Port, Protocol and Source Security Zone

D. 9-tuple match Source IP Address, Destination IP Address, Source Port, Destination Port, Source User, Source Security Zone, Destination Security Zone, Application and URL Category

Which command can be used to validate a Captive Portal policy?

A. eval captive-portal policy

B. request cp-policy-eval

C. test cp-policy-match

D. debug cp-policy

How are IPV6 DNS queries configured to user interface ethernet1/3?

A. Network > Virtual Router > DNS Interface

B. Objects > CustomerObjects > DNS

C. Network > Interface Mgrnt

D. Device > Setup > Services > Service Route Configuration

A company has a policy that denies all applications it classifies as bad and permits only application it classifies as good. The firewall administrator created the following security policy on the company's firewall.

Which interface configuration will accept specific VLAN IDs? Which two benefits are gained from having both rule 2 and rule 3 presents? (choose two)

A. A report can be created that identifies unclassified traffic on the network.

B. Different security profiles can be applied to traffic matching rules 2 and 3.

C. Rule 2 and 3 apply to traffic on different ports.

D. Separate Log Forwarding profiles can be applied to rules 2 and 3.

Which Panorama feature allows for logs generated by Panorama to be forwarded to an external Security Information and Event Management(SIEM) system?

A. Panorama Log Settings

B. Panorama Log Templates

C. Panorama Device Group Log Forwarding

D. Collector Log Forwarding for Collector Groups

A file sharing application is being permitted and no one knows what this application is used for. How should this application be blocked?

A. Block all unauthorized applications using a security policy

B. Block all known internal custom applications

C. Create a WildFire Analysis Profile that blocks Layer 4 and Layer 7 attacks

D. Create a File blocking profile that blocks Layer 4 and Layer 7 attacks

Which field is optional when creating a new Security Policy rule?

A. Name

B. Description

C. Source Zone

D. Destination Zone

E. Action