PCNSE試験無料問題集「Palo Alto Networks Certified Network Security Engineer 認定」

The UDP-4501 protocol-port is to between which two GlobalProtect components?

When an engineer configures an active/active high availability pair, which two links can they use? (Choose two)

解説: (GoShiken メンバーにのみ表示されます)
An administrator is receiving complaints about application performance degradation. After checking the ACC, the administrator observes that there is an excessive amount of VoIP traffic.
Which three elements should the administrator configure to address this issue? (Choose three.)

正解:C,D,E 解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
An administrator troubleshoots an issue that causes packet drops.
Which log type will help the engineer verify whether packet buffer protection was activated?

解説: (GoShiken メンバーにのみ表示されます)
An administrator is required to create an application-based Security policy rule to allow Evernote. The Evernote application implicitly uses SSL and web browsing.
What is the minimum the administrator needs to configure in the Security rule to allow only Evernote?

解説: (GoShiken メンバーにのみ表示されます)
A firewall engineer supports a mission-critical network that has zero tolerance for application downtime. A best-practice action taken by the engineer is configure an applications and Threats update schedule with a new App-ID threshold of 48 hours. Which two additional best-practice guideline actions should be taken with regard to dynamic updates? (Choose two.)

Based on the graphic which statement accurately describes the output shown in the Server Monitoring panel?

A company has deployed policies based on AD groups to restrict user access to critical infrastructure systems.
However, a phishing campaign against the organization prompts a search for more controls to secure access to critical assets. For users who need to access these systems, the company decides to use PAN-OS multi-factor authentication (MFA) integration to enforce MFA.
What must the company do in order to use PAN-OS MFA?

Which two actions can the administrative role called "vsysadmin" perform? (Choose two)

解説: (GoShiken メンバーにのみ表示されます)
A superuser is tasked with creating administrator accounts for three contractors. For compliance purposes, all three contractors will be working with different device-groups in their hierarchy to deploy policies and objects Which type of role-based access is most appropriate for this project?

解説: (GoShiken メンバーにのみ表示されます)
Exhibit.

An organization has Palo Alto Networks NGFWs that send logs to remote monitoring and security management platforms The network team has reported excessive traffic on the corporate WAN How could the Palo Alto Networks NGFW administrator reduce WAN traffic while maintaining support for all the existing monitoring/security platforms?

A network administrator wants to deploy SSL Forward Proxy decryption. What two attributes should a forward trust certificate have? (Choose two.)

解説: (GoShiken メンバーにのみ表示されます)
An engineer configures SSL decryption in order to have more visibility to the internal users' traffic when it is regressing the firewall.
Which three types of interfaces support SSL Forward Proxy? (Choose three.)

正解:B,C,D 解答を投票する
解説: (GoShiken メンバーにのみ表示されます)