Palo Alto Networks Certified Network Security Engineer (PCNSE7) Free Practice Test

Question 1

Support for which authentication method was added in PAN-OS 7.0?

A. RADIUS

B. LDAP

C. TACACS+

D. Diameter

Correct Answer: C

Question 2

Which two interface types can be used when configuring GlobalProtect Portal?(Choose two)

A. Tunnel

B. Layer 3

C. Virtual Wire

D. Loopback

Correct Answer: B,D

Question 3

Refer to the exhibit.

Which certificates can be used as a Forwarded Trust certificate?

A. Domain-Root-Cert

B. Certificate from Default Trust Certificate Authorities

C. Domain Sub-CA

D. Forward_Trust

Correct Answer: B

Question 4

Which two virtualized environments support Active/Active High Availability (HA) in PAN-OS
7 .0? (Choose two.)

A. AWS

B. VMware NSX

C. VMware ESX

D. KVM

Correct Answer: C,D

Question 5

An administrator needs to upgrade a Palo Alto Networks NGFW to the most current version of PAN-OS software. The firewall has internet connectivity through an Ethernet interface, but no internet connectivity from the management interface. The Security policy has the default security rules and a rule that allows all web-browsing traffic from any to any zone.
What must the administrator configure so that the PAN-OS software can be upgraded?

A. Service route

B. Scheduler

C. CRL

D. Security policy rule

Correct Answer: D

Question 6

If an administrator does not possess a website's certificate, which SSL decryption mode will allow the Palo Alto networks NGFW to inspect when users browse to HTTP(S) websites?

A. SSL Inbound Inspection

B. SSL Outbound Inspection

C. TLS Bidirectional proxy

D. SSL Forward Proxy

Correct Answer: A

Question 7

Which CLI command can be used to export the tcpdump capture?

A. scp export tcpdump from mgmt.pcap to <username@host:path>

B. download mgmt.-pcap

C. scp extract mgmt-pcap from mgmt.pcap to <username@host:path>

D. scp export mgmt-pcap from mgmt.pcap to <username@host:path>

Correct Answer: D

Question 8

How does Panorama handle incoming logs when it reaches the maximum storage capacity?

A. Panorama stops accepting logs until licenses for additional storage space are applied

B. Panorama stops accepting logs until a reboot to clean storage space.

C. Panorama automatically deletes older logs to create space for new ones.

D. Panorama discards incoming logs when storage capacity full.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

A network design calls for a "router on a stick" implementation with a PA-5060 performing inter-VLAN routing All VLAN-tagged traffic will be forwarded to the PA-5060 through a single dot1q trunk interface Which interface type and configuration setting will support this design?

A. Trunk interface type with specified tag

B. Layer 3 interface type with specified tag

C. Layer 3 subinterface type with specified tag

D. Layer 2 interface type with a VLAN assigned

Correct Answer: C

Question 10

Which three settings are defined within the Templates object of Panorama? (Choose three.)

A. Application Override

B. Setup

C. Virtual Routers

D. Security

E. Interfaces

Correct Answer: A,B,D

Welcome to TestSimulate

Palo Alto Networks Certified Network Security Engineer (PCNSE7) Free Practice Test