最新的Palo Alto Networks Certified Network Security Engineer - PCNSE7免費考試真題
Firewall administrators cannot authenticate to a firewall GUI.
Which two logs on that firewall will contain authentication-related information useful in troubleshooting this issue? (Choose two.)
Which two logs on that firewall will contain authentication-related information useful in troubleshooting this issue? (Choose two.)
正確答案: A,D
The certificate information displayed in the following image is for which type of certificate?
正確答案: B
Given the following table.
Which configuration change on the firewall would cause it to use 10.66.24.88 as the next hop for the 192.168.93.0/30 network?
Which configuration change on the firewall would cause it to use 10.66.24.88 as the next hop for the 192.168.93.0/30 network?
正確答案: B
A client is deploying a pair of PA-5000 series firewalls using High Availability (HA) in Active/Passive mode. Which statement is true about this deployment?
正確答案: B
A firewall administrator has completed most of the steps required to provision a standalone Palo Alto Networks Next-Generation Firewall. As a final step, the administrator wants to test one of the security policies.
Which CLI command syntax will display the rule that matches the test?
Which CLI command syntax will display the rule that matches the test?
正確答案: A
說明：（僅 Fast2test 成員可見）
Which option is part of the content inspection process?
正確答案: B
The web server is configured to listen for HTTP traffic on port 8080. The clients access the web server using the IP address 1.1.1.100 on TCP Port 80. The destination NAT rule is configured to translate both IP address and report to 10.1.1.100 on TCP Port 8080.
Which NAT and security rules must be configured on the firewall? (Choose two)
Which NAT and security rules must be configured on the firewall? (Choose two)
正確答案: B,C
An administrator is using Panorama and multiple Palo Alto Networks NGFWs. After upgrading all devices to the latest PAN-OS software, the administrator enables log forwarding from the firewalls to Panorama. Pre-existing logs from the firewalls are not appearing in Panorama.
Which action would enable the firewalls to send their pre-existing logs to Panorama?
Which action would enable the firewalls to send their pre-existing logs to Panorama?
正確答案: B
A network security engineer needs to configure a virtual router using IPv6 addresses.
Which two routing options support these addresses? (Choose two)
Which two routing options support these addresses? (Choose two)
正確答案: A,C
說明：（僅 Fast2test 成員可見）
How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?
正確答案: D
An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs. The administrator assigns priority 100 to the active firewall.
Which priority is correct for the passive firewall?
Which priority is correct for the passive firewall?
正確答案: A
Server Message Block (SMB), a common file-sharing application, is slow when passing through a Palo Alto Networks firewall. The Network Security Administrator created an application override policy, assigning all SMB traffic to a custom application, to resolve the slowness issue.
Why does this configuration resolve the issue?
Why does this configuration resolve the issue?
正確答案: C
Which two interface types can be used when configuring GlobalProtect Portal?(Choose two)
正確答案: A,C
During the packet flow process, which two processes are performed in application identification? (Choose two.)
正確答案: C,D
Which authentication source requires the installation of Palo Alto Networks software, other than PAN-OS 7x, to obtain a username-to-IP-address mapping?
正確答案: D