Free PCNSE Exam Braindumps

Pass your Palo Alto Networks Certified Security Engineer (PCNSE)PAN-OS 9.0 exam with these free Questions and Answers

Page 9 of 18
QUESTION 36

Which User-ID mapping method should be used in a high-security environment where all IP address-to-user mappings should always be explicitly known?

  1. A. PAN-OS integrated User-ID agent
  2. B. GlobalProtect
  3. C. Windows-based User-ID agent
  4. D. LDAP Server Profile configuration

Correct Answer: B

QUESTION 37

You have upgraded Panorama to 10.2 and need to upgrade six Log Collectors. When upgrading Log Collectors to 10.2, you must do what?

  1. A. Upgrade the Log Collectors one at a time.
  2. B. Add Panorama Administrators to each Managed Collector.
  3. C. Add a Global Authentication Profile to each Managed Collector.
  4. D. Upgrade all the Log Collectors at the same time.

Correct Answer: D

QUESTION 38

What can you use with Global Protect to assign user-specific client certificates to each GlobalProtect user?

  1. A. SSL/TLS Service profile
  2. B. Certificate profile
  3. C. SCEP
  4. D. OCSP Responder

Correct Answer: C

QUESTION 39

An engineer is pushing configuration from Panorama lo a managed firewall.
What happens when the pushed Panorama configuration has Address Object names that duplicate the Address Objects already configured on the firewall?

  1. A. The firewall rejects the pushed configuration, and the commit fails.
  2. B. The firewall renames the duplicate local objects with "-1" at the end signifying they are clones; it willupdate the references to the objects accordingly and fully commit the pushed configuration.
  3. C. The firewall fully commits all of the pushed configuration and overwrites its locally configured objects
  4. D. The firewall ignores only the pushed objects that have the same name as the locally configured objects, and it will commit the rest of the pushed configuration.

Correct Answer: A

QUESTION 40

An administrator accidentally closed the commit window/screen before the commit was finished. Which two options could the administrator use to verify the progress or success of that commit task? (Choose two.)

  1. A. System Logs
  2. B. Task Manager
  3. C. Traffic Logs
  4. D. Configuration Logs

Correct Answer: AB
* A. System Logs: The system logs contain information about various events that occur on the firewall, including the commit process. The administrator can review the system logs to verify whether the commit completed successfully or whether there were any errors or warnings during the commit process.
* B. Task Manager: The task manager displays a list of all active tasks on the firewall, including the commit task. The administrator can use the task manager to check the status of the commit task, including whether it is in progress, completed successfully, or failed.

Page 9 of 18

Post your Comments and Discuss Paloalto-Networks PCNSE exam with other Community members: