Palo Alto Networks Certified Network Security Engineer - PCNSE7 Exam Questions
QUESTION NO: 1
Click the Exhibit button below,
A firewall has three PBF rules and a default route with a next hop of 172.20.10.1 that is configured in the default VR. A user named Will has a PC with a 192.168.10.10 IP address.
He makes an HTTPS connection to 172.16.10.20.
Which is the next hop IP address for the HTTPS traffic from Will's PC?
Click the Exhibit button below,
A firewall has three PBF rules and a default route with a next hop of 172.20.10.1 that is configured in the default VR. A user named Will has a PC with a 192.168.10.10 IP address.
He makes an HTTPS connection to 172.16.10.20.
Which is the next hop IP address for the HTTPS traffic from Will's PC?
Correct Answer: C
QUESTION NO: 2
A host attached to Ethernet 1/4 cannot ping the default gateway. The widget on the dashboard shows Ethernet 1/1 and Ethernet 1/4 to be green. The IP address of Ethernet
1/1 is 192.168.1.7 and the IP address of Ethernet 1/4 is 10.1.1.7. The default gateway is attached to Ethernet 1/1. A default route is properly configured.
What can be the cause of this problem?
A host attached to Ethernet 1/4 cannot ping the default gateway. The widget on the dashboard shows Ethernet 1/1 and Ethernet 1/4 to be green. The IP address of Ethernet
1/1 is 192.168.1.7 and the IP address of Ethernet 1/4 is 10.1.1.7. The default gateway is attached to Ethernet 1/1. A default route is properly configured.
What can be the cause of this problem?
Correct Answer: B
QUESTION NO: 3
In an enterprise deployment, a network security engineer wants to assign to a group of administrators without creating local administrator accounts on the firewall.
Which authentication method must be used?
In an enterprise deployment, a network security engineer wants to assign to a group of administrators without creating local administrator accounts on the firewall.
Which authentication method must be used?
Correct Answer: B
QUESTION NO: 4
A network security engineer is asked to perform a Return Merchandise Authorization (RMA) on a firewall Which part of files needs to be imported back into the replacement firewall that is using Panorama?
A network security engineer is asked to perform a Return Merchandise Authorization (RMA) on a firewall Which part of files needs to be imported back into the replacement firewall that is using Panorama?
Correct Answer: B
QUESTION NO: 5
Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?
Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?
Correct Answer: A
QUESTION NO: 6
Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)
Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)
Correct Answer: B,D,E
QUESTION NO: 7
A customer has an application that is being identified as unknown-top for one of their custom PostgreSQL database connections. Which two configuration options can be used to correctly categorize their custom database application? (Choose two.)
A customer has an application that is being identified as unknown-top for one of their custom PostgreSQL database connections. Which two configuration options can be used to correctly categorize their custom database application? (Choose two.)
Correct Answer: A,C
QUESTION NO: 8
Which Captive Portal mode must be configured to support MFA authentication?
Which Captive Portal mode must be configured to support MFA authentication?
Correct Answer: A
QUESTION NO: 9
A VPN connection is set up between Site-A and Site-B, but no traffic is passing in the system log of Site-A, there is an event logged as like-nego-p1-fail-psk.
What action will bring the VPN up and allow traffic to start passing between the sites?
A VPN connection is set up between Site-A and Site-B, but no traffic is passing in the system log of Site-A, there is an event logged as like-nego-p1-fail-psk.
What action will bring the VPN up and allow traffic to start passing between the sites?
Correct Answer: B
QUESTION NO: 10
Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?
Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?
Correct Answer: D
QUESTION NO: 11
A firewall administrator is troubleshooting problems with traffic passing through the Palo Alto Networks firewall. Which method shows the global counters associated with the traffic after configuring the appropriate packet filters?
A firewall administrator is troubleshooting problems with traffic passing through the Palo Alto Networks firewall. Which method shows the global counters associated with the traffic after configuring the appropriate packet filters?
Correct Answer: C
QUESTION NO: 12
Which two options are required on an M-100 appliance to configure it as a Log Collector? (Choose two)
Which two options are required on an M-100 appliance to configure it as a Log Collector? (Choose two)
Correct Answer: B,D
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
