PCNSE6 시험 - Palo Alto Networks실제시험문제와 답 - 153문항

Question No : 1

The WildFire Cloud or WF-500 appliance provide information to which two Palo Alto Networks security services? Choose 2 answers

A.Threat Prevention
B.App-ID
C.URL Filtering
D.PAN-OS
E.GlobalProtect Data File

정답:
Explanation:
Reference: https://www.paloaltonetworks.com/products/technologies/wildfire.html

Question No : 2

A user is reporting that they cannot download a PDF file from the internet.
Which action will show whether the downloaded file has been blocked by a Security Profile?

A.Filter the Session Browser for all sessions from the user with the application "adobe".
B.Filter the System log for "Download Failed" messages.
C.Filter the Traffic logs for all traffic from the user that resulted in a Deny action.
D.Filter the Data Filtering logs for the user’s traffic and the name of the PDF file.

정답:

Question No : 3

Which of the following objects cannot use User-ID as a match criteria?

A.Security Policies
B.QoS
C.Policy Based Forwarding
D.DoS Protection
E.None of the above

정답:

Question No : 4

When configuring Admin Roles for Web UI access, what are the available access levels?

A.Enable and Disable only
B.None, Superuser, Device Administrator
C.Allow and Deny only
D.Enable, Read-Only and Disable

정답:

Question No : 5

When a user logs in via Captive Portal, their user information can be checked against:

A.Terminal Server Agent
B.Security Logs
C.XML API
D.Radius

정답:

Question No : 6

Which URL Filtering Security Profile action logs the URL Filtering category to the URL Filtering log?

A.Allow
B.Alert
C.Log
D.Default

정답:
Explanation:
Reference: https://www.paloaltonetworks.com/documentation/61/pan-os/pan-os/url-filtering/configure-urlfiltering.html

Question No : 7

In order to route traffic between layer 3 interfaces on the PAN firewall you need:

A.VLAN
B.Vwire
C.Security Profile
D.Virtual Router

정답:

Question No : 8

The following can be configured as a next hop in a Static Route:

A.A Policy-Based Forwarding Rule
B.Virtual System
C.A Dynamic Routing Protocol
D.Virtual Router

정답:

Question No : 9

Which two interface types can be used when configuring GlobalProtect Portal? Choose 2 answers

A.Virtual Wire
B.Loopback
C.Tunnel
D.Layer3

정답:
Explanation:
Reference: https://www.paloaltonetworks.com/content/dam/paloaltonetworkscom/en_US/assets/pdf/framemaker/61/globalprotect/globalprotect-admin-guide.pdf page 10

Question No : 10

What is the default setting for 'Action' in a Decryption Policy's rule?

A.No-decrypt
B.Decrypt
C.Any
D.None

정답:

Question No : 11

The "Disable Server Return Inspection" option on a security profile:

A.Can only be configured in Tap Mode
B.Should only be enabled on security policies allowing traffic to a trusted server.
C.Does not perform higher-level inspection of traffic from the side that originated the TCP SYN packet
D.Only performs inspection of traffic from the side that originated the TCP SYN-ACK packet

정답:

Question No : 12

A network administrator uses Panorama to push security policies to managed firewalls at branch offices.
Which policy type should be configured on Panorama if the administrator wishes to allow local administrators at the branch office sites to override these policies?

A.Implicit Rules
B.Post Rules
C.Default Rules
D.Pre Rules

정답:

Question No : 13

Which of the following describes the sequence of the Global Protect agent connecting to a Gateway?

A.The Agent connects to the Portal obtains a list of Gateways, and connects to the Gateway with the fastest SSL response time
B.The agent connects to the closest Gateway and sends the HIP report to the portal
C.The agent connects to the portal, obtains a list of gateways, and connects to the gateway with the fastest PING response time
D.The agent connects to the portal and randomly establishes a connection to the first available gateway

정답:

Question No : 14

The URL gatewayl.company.com resolves to the external interface of the firewall on the company’s external DNS server and to the internal interface of the firewall on the company s internal DNS server. This Gateway configuration will have which two outcomes? Choose 2 answers

A.Clients outside the network will be able to connect to the external gateway Gateway1.
B.Clients inside the network will be able to connect to the internal gateway Gateway1.
C.Clients outside the network will NOT be able to connect to the external gateway Gateway1.
D.Clients inside the network will NOT be able to connect to the internal gateway Gateway1.

정답:

Question No : 15

A Palo Alto Networks firewall is being targeted by an NTP Amplification attack and is being flooded with tens of thousands of bogus UDP connections per second to a single destination IP address and port.
Which option, when enabled with the correct threshold, would mitigate this attack without dropping legitimate traffic to other hosts inside the network?

A.Zone Protection Policy with UDP Flood Protection
B.Classified DoS Protection Policy using destination IP only with a Protect action
C.QoS Policy to throttle traffic below maximum limit
D.Security Policy rule to deny traffic to the IP address and port that is under attack

정답:

Palo Alto Networks PCNSE6 시험