Palo Alto Networks: PCNSE Practice Exam Questions With 100% Correct Answers.

What can be used to push network and device configurations from Panorama to firewalls running PAN-OS software? - Answer-Templates Which two virtualization platforms officially support the deployment of Palo Alto Networks VMSeries firewalls? - Answer-Kernel Virtualization Module (KVM) Microsoft Hyper-V Where can the oversubscription rate be adjusted on platforms that support NAT oversubscription? - Answer-In the GUI, under Device - Setup - Session - Session Settings Which action will display the NAT policies that are deployed on the firewall? - Answer-From the command line, check the NAT policies loaded on the data plane using the command "show running nat-policy." What is the proper method to determine which active sessions on the firewall matched a security rule named "ftp-out"? - Answer-In the CLI, run the command "show session all filter rule ftp-out." Which feature of the Palo Alto Networks firewall was designed to minimize network latency on the data plane? - Answer-Single-Pass Parallel Processing Architecture Which statement is true about how Palo Alto Networks firewalls monitor traffic on the network? - Answer-Unlike traditional firewalls that use port or protocol to identify applications, the Palo Alto Networks firewalls use the application signature (the App-ID technology) to identify applications. Consider this graphic representation of the Threat Monitor report: What does this report display? - Answer-It displays the Top 10 Threats over the last 6 hours The WildFire Cloud or WF500 appliance provide information to which two Palo Alto Networks security services? - Answer-Threat Prevention URL FilteringWhen configuring packet capture on a Palo Alto Networks firewall, what are the valid stage types? - Answer-Receive, firewall, transmit, and drop You are analyzing a specific device group from Panorama and notice there are a very large number of "insufficient data" log entries. What does "insufficient data" mean? - Answer-The amount of data seen during a session was not enough to identify the application. A customer has a requirement for a hardware firewall that supports at least two virtual systems (vsys). Which platform would be the smallest one to meet the requirement? - Answer-PA-3220