Question 1

With the default TCP and UDP settings on the firewall, what will be the identified application in the following session?

Accepted Answer

Traffic didnt match any other policies and so landed at the implicit "deny all" policy. If it's deny all, the traffic was dropped before the application could be
determined. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClibCAC

Question 2

An engineer is troubleshooting a traffic-routing issue. What is the correct packet-flow sequence?

Accepted Answer

The correct packet-flow sequence is C. PBF > Static route > Security policy enforcement. This sequence describes the order of operations that the firewall
performs when processing a packet. PBF stands for
Policy-Based Forwarding, which is a feature that allows the firewall to override the routing table and forward
traffic based on the source and destination addresses, application, user, or service. PBF is evaluated before the static route lookup, which is the default method of
forwarding traffic based on the destination address and the longest prefix match. Security policy enforcement is the stage where the firewall applies the security
policy rules to allow or block traffic based on various criteria, such as zone, address, port, user, application, etc12. References: Policy-Based Forwarding, Packet
Flow Sequence in PAN-OS

Question 3

An engineer configures a specific service route in an environment with multiple virtual systems instead of using the inherited global service route configuration.
What type of service route can be used for this configuration?

Accepted Answer

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/virtual-systems/customize-service-routes-for-a-vir

Question 4

Which protocol is supported by GlobalProtect Clientless VPN?

Accepted Answer

Virtual Desktop Infrastructure (VDI) and Virtual Machine (VM) environments, such as Citrix XenApp and XenDesktop or VMWare Horizon and Vcenter, support
access natively through HTML5. You can RDP, VNC, or SSH to these machines through Clientless VPN without requiring additional third-party middleware. In
environments that do not include native support for HTML5 or other web application technologies supported by Clientless VPN, you can use third-party vendors,
such as Thinfinity, to RDP through Clientless VPN. Reference:
https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-clientless-vpn/supporte
https://networkwiki.blogspot.com/2017/03/palo-alto-networks-clientless-vpn-and.html

Question 5

A network administrator is trying to prevent domain username and password submissions to phishing sites on some allowed URL categories
Which set of steps does the administrator need to take in the URL Filtering profile to prevent credential phishing on the firewall?

Accepted Answer

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/prevent-credential-phishing/set-u https://docs.paloaltonetworks.com/panos/10-2/pan-os-admin/url-filtering/prevent-credential-phishing/set-up-cre

Question 6

Which type of zone will allow different virtual systems to communicate with each other?

Accepted Answer

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/virtual-systems/communication-between-virtual-s

Question 7

ln a security-first network, what is the recommended threshold value for apps and threats to be dynamically updated?

Accepted Answer

Schedule content updates so that they download-and-install automatically. Then, set a Threshold that determines the amount of time the firewall waits before
installing the latest content. In a security-first network, schedule a six to twelve hour threshold.
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/threat-prevention/best-practices-for-content-and-thr
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/software-and-content-updates/best-practices-for

Question 8

Given the following snippet of a WildFire submission log did the end-user get access to the requested information and why or why not?

Accepted Answer

https://live.paloaltonetworks.com/t5/general-topics/wildfire-submission-entries-with-severity-high-showing-acti

Certshared now are offering 100% pass ensure PCNSE dumps!
/exam/PCNSE/ (89 Q&As)

Question 9

Which template values will be configured on the firewall if each template has an SSL to be deployed. The template stack should consist of four templates arranged
according to the diagram.
Which template values will be configured on the firewall if each template has an SSL/TLS Service profile configured named Management?

Accepted Answer

The template stack should consist of four templates arranged according to the diagram. The template values that will be configured on the firewall if each template
has an SSL/TLS Service profile configured named Management will be the values in Chicago. This is because the SSL/TLS Service profile is configured in the
Chicago template, which is the highest priority template in the stack. The firewall will inherit the settings from the highest priority template that has the setting
configured, and ignore the settings from the lower priority templates that have the same setting configured. Therefore, the values in Datacenter, efwOlab.chi, and
Global Settings will not be applied to the firewall. References:
[Template Stack Configuration]
 [Template Stack Priority]

Question 10

An engineer is configuring a template in Panorama which will contain settings that need to be applied to all firewalls in production.
Which three parts of a template an engineer can configure? (Choose three.)

Accepted Answer

A, C, and D are the correct answers because they are the parts of a template that an engineer can configure in Panorama. A template is a collection of device
and network settings that can be pushed to multiple firewalls from Panorama1. A template can contain settings such as2:
 A: NTP Server Address: This is the address of the Network Time Protocol server that synchronizes the time on the firewall.
 C: Authentication Profile: This is the profile that defines how the firewall authenticates users and administrators.
 D: Service Route Configuration: This is the configuration that specifies which interface and source IP address the firewall uses to access external services,
such as DNS, email, syslog, etc.