最新的Palo Alto Networks PCNSC免費考試真題

問題1

An administrator needs to create a new Antivirus Profile to address a virus that is spreading internally over SMB.
To create a secure posture the administrator should choose which set of actions for the SMB decoder in an Antivirus Profile?

A. Action - Reset-Both. WiWfire Action - Alert

B. Action - Reset-Both: Wildfire Action - Reset-Both

C. Action - Allow; Wildfire Action - Allow

D. Action - Drop; Wildfire Action - Reset-Both

正確答案: B

說明：（僅 Fast2test 成員可見）

問題2

What happens when a packet from an existing session is received by a firewall that

A. The firewall forwards the packet lo the peer firewall over the HA3 link

B. The firewall lakes ownership of the session from the peer firewall

C. The firewall requests the sender to resend the packet

D. The firewall drops the packet to prevent any L3 loops

正確答案: B

說明：（僅 Fast2test 成員可見）

問題3

Which three steps must an administrator perform to load only address objects from a PAN-OS saved configuration file into a VM-3C0 firewall that is in production? (Choose three)

A. Import named configuration snapshot through the web interface

B. enter the configuration mode from the CLI

C. use load config partial command

D. use the device configuration import in Panorama

E. load the config in the web interface and commit

正確答案: B,C,E

說明：（僅 Fast2test 成員可見）

問題4

Your customer has asked you to set up tunnel monitoring on an IPsec VPN tunnel between two offices What three steps are needed to set up tunnel monitoring? (Choose three)

A. Restart each IPsec tunnel

B. Add an IP address to each tunnel interface

C. Create a monitoring profile

D. Enable tunnel monitoring on each IPsec tunnel

E. Restart each IKE gateway

正確答案: B,C,D

說明：（僅 Fast2test 成員可見）

問題5

A customer has a pair of Panorama HA appliances tunning local log collectors and wants to have log redundancy on logs forwarded from firewalls Which two configuration options fulfill the customer's requirement for log redundancy? (Choose two)

A. Panorama configured in HA provides log redundancy

B. Panorama operational mode needs to be Dedicated Log Collector

C. A Collector Group must contain at least two Log Collectors

D. Log redundancy must be enabled per Collector Group

正確答案: C,D

說明：（僅 Fast2test 成員可見）

問題6

TAC has requested a PCAP on your Panorama lo see why the DNS app is having intermittent issues resolving FODN What is the appropriate CLI command1*

A. tcp dump snap-en 0 filter "app dns"

B. tcpdump snaplen 0 filter "port 53"

C. tcp dump snaplen 53 filter "tcp 53"

D. tcpdump snaplen 53 filter "port 53"

正確答案: B

說明：（僅 Fast2test 成員可見）

問題7

A firewall that was previously connected lo a User-ID agent server now shows disconnected What is the likely cause?

A. The agent is not running

B. The Domain Controller service account has been locked out

C. The firewall was upgraded to a PAN-OS version that is not compatible with the agent version

D. The server has stopped listening on port 2010

正確答案: C

說明：（僅 Fast2test 成員可見）

最新的Palo Alto Networks Certified Network Security Consultant - PCNSC免費考試真題

聯系我們

站內鏈接

最新更新