PCNSC Question 41 to 59

Which two options describe the behavior of the “Direction” property in a WildFire Analysis Profile rule? (Choose two.)

• • The both direction option matches all files that are seen by the firewall, regardless of whether the transfer is started by the connection initiator or responder.

  
  

• The download direction option matches files that the connection initiator received from the service it connected to.

• The upload direction option matches only files that were uploaded to the internet by a user on the Inside network.

• The both direction option matches all files, but only if the transfer is started by the connection initiator.

A company’s network operations engineer is documenting a solution and wants to know the default priority setting for an LACP connection. If no changes are made to the default configuration settings for the LACP, which priority setting should you share with the engineer?

• 32,768

• 100

• 1

• 65,535

Examine the configured Security policy rule. Which day one/Iron Skillet Security Profile Group is used to secure the traffic that is permitted through this rule?

• Internal

• Inbound

• Default

• Outbound

In preparation for a cutover event, which two processes or procedures should be verified? (Choose two.)

• Auditing

• Change management requirements

• Roles and responsibilities

• Logging and reporting

A firewall that was previously connected to a User-ID agent server now shows disconnected.
What is the likely cause?

• The server has stopped listening on port 2010

• The Domain Controller service account has been locked out.

• The agent is not running.

• The firewall was upgraded to a PAN-OS version that is not compatible with the agent version.

Why is a threshold used when content updates are installed?

• To let the firewall load the content updates before it actually installs them

• To ensure that the content update is installed only during a change window

• To allow time to see if the content update gets redacted by Palo Alto Networks

• To allow the content updated to be loaded on a Friday but installed over the weekend

A Panorama superuser administrator needs to add a newly hired employee as a Panorama administrator. This employee needs to have their permissions restricted to only modify a specific set of policies and objects within the organization’s Panorama.
What should the superuser administrator do to ensure that the new employee’s permissions are restricted?

• • Create the required Access Domain and add the appropriate device group.

  
  

• Create an authentication profile in the Panorama tab.

• Set the “allowed admins” value within the device group properties.

• Add access to shared objects by selecting the Shared-Only option.

Reordenar lo siguienteA client initiates a SSL session with the server. The NGFW intercepts the client’s SSL request. For what happens next, match each SSL Forward Proxy task with its order in the process:

• NGFW initiates an SSL session with the server

• SSL tunnels are established between the client server and the NGFW and the server.

• NGFW signs a copy of the server certificate and sends it to the client for authentication. The client then verifies the certificate from the NGFW.

• Server sends a signed certificate to present to the client.

Your customer believes that the Panorama appliance is being overwhelmed by the logs from deployed Palo Alto Networks Next-Generation Firewalls.
What CLI command can you run to determine the number of logs per second sent by each firewall?

• show logging status

• debug log-receiver statistics

• show log traffic

• debug log-sender statistics

A customer recently purchased a license for URL filtering and is having trouble activating PAN-DB. Which two commands can be used to troubleshoot this issue? (Choose two.)

• show system setting url-database

• show device setting pan-db

• request url-database license info

• request license info