[2022年03月04日]PCNSC試験問題集で100%合格率PCNSC試験！ [Q24-Q45]

[2022年03月04日]PCNSC試験問題集で100%合格率PCNSC試験！

試験問題集リアルPaloalto Certifications and Accreditations問題集74解答を試そう！

質問 24
Which two options prevents the firewall from capturing traffic passing through it? (Choose two.)

A. The traffic is offloaded.
B. The traffic does not match the packet capture filter
C. The firewall is in milti-vsys mode.
D. The firewall's DP CPU is higher than 50%

正解: A,B

質問 25
Winch three steps will reduce the CPU utilization on the management plane? (Choose three. ) Disable logging at session start in Security policies.

A. Disable predefined reports.
B. Application override of SSL application.
C. Disable SNMP on the management interface.
D. Reduce the traffic being decrypted by the firewall.

正解: A,C,D

質問 26
Which three authentication faction factors does PAN-OS software support for MFA? (Choose three.)

A. SMS
B. Okta Adaptive
C. Push
D. Pull
E. Voice

正解: C,D,E

質問 27
Which three file types can be forward to WildMFire for analysis a part of the basic WildMFire service?

A. .fon
B. .dil
C. .exe
D. .apk
E. .pdf
F. .jar

正解: D,E,F

質問 28
An administrator wants multiple web servers in the DMZ to receive connections from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10 1.22 Based on the information shown in the age, which NAT rule will forward web-browsing traffic correctly?

A)

B)

C)

D)

A. Option D
B. Option B
C. Option C
D. Option A

正解: D

質問 29
Which two action would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL forward proxy? (Choose two.)

A. Configure a Dynamic Address Group for untrusted sites.
B. Configure an EDL to pull IP Addresses of known sites resolved from a CRL.
C. Create a Security Policy rule with vulnerability Security Profile attached.
D. Enable the "Block seasons with untrusted Issuers- setting.
E. Create a no-decrypt Decryption Policy rule.

正解: C,D

質問 30
An administrator logs in to the Palo Alto Networks NGFW and reports and reports that the WebUI is missing the policies tab. Which profile is the cause of the missing policies tab?

A. Admin Role
B. Authentication
C. WebUI
D. Authorization

正解: A

質問 31
VPN traffic intended for an administrator's Palo Alto Networks NGfW is being maliciously intercepted and retransmitted by the interceptor. When Creating a VPN tunnel, which protection profile cm be enabled to prevent this malicious behavior?

A. DoS Protection
B. Replay
C. zone Protection
D. Web Application

正解: C

質問 32
Which three options are supposed in HA Lite? (Choose three.)

A. synchronization of IPsec security associations
B. active/passive deployment
C. Configuration synchronization
D. session synchronization
E. Virtual link

正解: A,B,C

質問 33
A user's traffic traversing a Palo Alto Networks NGFW sometime can reach http//www company com At the session times out.
The NGFW has been configured with a PBF rule that the user's traffic matches when it goes to http //www company com.
How con the firewall be configured to automatically disable the PBF rule if the next hop goes down?

A. Create and add a Monitor Profile with an action of Fail Over in the PBF rule in question.
B. Create and add a Monitor Profile with an action of Wait Recover in the PBF rule in question.
C. Enable and configure a Link Monitoring Profile for the external interface of the firewall.
D. Configure path monitoring for tine next hop gateway on the default route in tin- virtual router.

正解: A

質問 34
Which User-ID method should b configured to map addresses to usernames for users connected through a terminal server?

A. XFF header
B. server monitoring
C. port mapping
D. Client probing

正解: C

質問 35
Which two benefits come from assigning a Decrypting Profile to a Decryption rule with a" NO Decrypt" action? (Choose two.)

A. Block credential phishing.
B. Block sessions with unsuspected cipher suites
C. Block sessions with expired certificates
D. Block sessions with client authentication
E. Block sessions with untrusted issuers

正解: C,E

質問 36
Which CLI command enables an administrator to view detail about the firewall including uptime. PAN -OS version, and serial number?

A. Show system info
B. Show system detail
C. Show session info
D. debug system details

正解: A

質問 37
A customer wants to combine multiple Ethernet interfaces into a single virtual interface using Link aggregation.
Which two formats are correct for naming aggregate interlaces? (Choose two.)

A. aggregate.8
B. ae.8
C. ae.1
D. aggregate.1

正解: B,C

質問 38
An organization has Palo Alto Networks MGfWs that send logs to remote monitoring and security management platforms. The network team has report has excessive traffic on the corporate WAN. How could the Palo Alto Networks NOFW administrator reduce WAN traffic while maintaining support for all the existing monitoring/security platforms?

A. Configure log compression and optimization features on all remote firewalls.
B. Any configuration on an M-500 would address the insufficient bandwidth concerns.
C. Forward logs from external sources to Panorama for correlation, arid from Panorama send to the NGFW
D. forward logs from firewalls only to Panorama, and have Panorama forward log* lo other external service.

正解: D

質問 39
A Company needs to preconfigured firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.
Which VPN configuration would adapt to changes when deployed to Hie future site?

A. preconfigured PPTP Tunnels
B. preconfigured GlobalProtcet satellite
C. preconfigured GlobalProtcet client
D. preconfigured iPsec tunnels

正解: B

質問 40
How does Panorama prompt VMware NSX to quarantine an in6erface VM??

A. Syslog Server Profile
B. HTTP Server Profile
C. SNMP Server Profile
D. Email Server Profile

正解: A

質問 41
How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?

A. Enable all four stage of traffic capture (TX, RX, DROP, Firewall)
B. Use the tcpdump command
C. Use the debug dataplane packet-diag set capture stage management file command
D. USe the debug dataplane packet-dia set capture stage firewall file command

正解: B

質問 42
Which PAN-OS policy must you configure to force a user to provide additional credential before he is allowed to access an internal application that contains highly sensitive business data?

A. Application Override policy
B. Authentication policy
C. Security policy
D. Decryption policy

正解: B

質問 43
An administrator has left a firewall to used default port for all management services.
Which three function performed by the dataplane? (Choose three.)

A. NAT
B. NTP
C. file blocking
D. WildFire updates
E. antivirus

正解: A,B,D

質問 44
What will be the egress interface if the traffic's ingress interface is Ethernet 1/6 sourcing form 192.168.11.3 and to the destination 10.46.41.113.during the.