PCNSE 시험 - Palo Alto Networks실제시험문제와 답 - 255문항

Question No : 1

What is the best description of the HA4 Keep-alive Threshold (ms)?

A.the time that a passive or active-secondary firewall will wait before taking over as the active or active-primary firewall
B.the timeframe that the local firewall waits before going to Active state when another cluster member is preventing the cluster from fully synchronizing
C.the maximum interval between hello packets that are sent to verify that the HA functionality on the other firewall is operational
D.the timeframe within which the firewall must receive keepalives from a cluster member to know that the cluster member is functional

정답:

Question No : 2

PBF can address which two scenarios? (Choose two.)

A.providing application connectivity the primary circuit fails
B.enabling the firewall to bypass Layer 7 inspection
C.forwarding all traffic by using source port 78249 to a specific egress interface
D.routing FTP to a backup ISP link to save bandwidth on the primary ISP link

정답:

Question No : 3

Which statement regarding HA timer settings is true?

A.Use the Aggressive profile for slower failover timer settings.
B.Use the Moderate profile for typical failover timer settings.
C.Use the Critical profile for faster failover timer settings.
D.Use the Recommended profile for typical failover timer settings.

정답:

Question No : 4

What are three important considerations during SD-WAN configuration planning? (Choose three.)

A.branch and hub locations
B.dynamic routing
C.link requirements
D.connection throughput
E.IP Addresses

정답:

Question No : 5

An engineer is troubleshooting traffic routing through the virtual router. The firewall uses multiple routing protocols, and the engineer is trying to determine routing priority.
Match the default Administrative Distances for each routing protocol.

정답:

Question No : 6

What type of address object would be useful for internal devices where the addressing structure assigns meaning to certain bits in the address, as illustrated in the diagram?

A.IP Netmask
B.IP Address
C.IP Wildcard Mask
D.IP Range

정답:

Question No : 7

In the screenshot above, which two pieces of information can be determined from the ACC configuration shown? (Choose two.)

A.Threats with a severity of "high" are always listed at the top of the Threat Name list.
B.The ACC has been filtered to only show the FTP application.
C.The Network Activity tab will display all applications, including FT
D.Insecure-credentials, brute-force, and protocol-anomaly are all a part of the vulnerability Threat Type.

정답:

Question No : 8

A firewall administrator is trying to identify active routes learned via BGP in the virtual router runtime stats within the GUI.
Where can they find this information?

A.under the BGP Summary tab
B.routes listed in the routing table with flags A?B
C.routes listed in the forwarding table with BGP in the Protocol column
D.routes listed in the routing table with flags Oi

정답:

Question No : 9

A network administrator plans a Prisma Access deployment with three service connections, each with a BGP peering to a CPE. The administrator needs to minimize the BGP configuration and management overhead on on-prem network devices.
What should the administrator implement?

A.hot potato routing
B.summarized BGP routes before advertising
C.target service connection for traffic steering
D.default routing

정답:

Question No : 10

Which statement is correct given the following message from the PanGPA.log on the GlobalProtect app?
Failed to connect to server at port: 4767
A. The GlobalProtect app failed to connect to the GlobalProtect Portal on port 4767.
B. The PanGPS process failed to connect to the PanGPA process on port 4767.
C. The GlobalProtect app failed to connect to the GlobalProtect Gateway on port 4767.
D. The PanGPA process failed to connect to the PanGPS process on port 4767.

정답: D

Question No : 11

You need to allow users to access the office-suite applications of their choice.
How should you configure the firewall to allow access to any office-suite application?

A.Create an Application Filter and name it Office Programs, then filter it on the business-systems category.
B.Create an Application Group and add business-systems to it.
C.Create an Application Filter and name it Office Programs, then filter it on the office-programs subcategory.
D.Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office.

정답:

Question No : 12

SAML SLO is supported for which two firewall features? (Choose two.)

A.WebUI
B.CLI
C.GlobalProtectPortal
D.CaptivePortal

정답:

Question No : 13

Which configuration task is best for reducing load on the management plane?

A.Set the URL filtering action to send alerts.
B.Enable session logging at start.
C.Disable pre-defined reports.
D.Disable logging on the default deny rule.

정답:

Question No : 14

What would allow a network security administrator to authenticate and identify a user with a new BYOD-type device that is not joined to the corporate domain?

A.a Security policy with "known-user” selected in the Source User field
B.an Authentication policy with "known-user” selected in the Source User field
C.an Authentication policy with 'unknown' selected in the Source User field
D.a Security policy with “unknown” selected in the Source User field

정답:

Question No : 15

Which statement is true regarding a Best Practice Assessment?

A.It runs only on firewalls.
B.It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture.
C.When guided by an authorized sales engineer, it helps determine the areas of greatest risk where you should focus prevention activities.
D.It shows how your current configuration compares to Palo Alto Networks recommendations.

정답:

Palo Alto Networks PCNSE 시험