最適な練習法にはPalo Alto Networks PCNSC問題集で素晴らしいPCNSC試験問題PDF
更新された検証済みの合格させるPCNSC試験リアル問題と解答
質問 19
Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)
- A. Content-ID
- B. User-ID
- C. Application and Threats
- D. Antivirus
正解: C,D
質問 20
Which two methods can be configured to validate the revocation status of a certificate? (Choose two)
- A. Cert-Validation-Profile
- B. CRL
- C. OCSP
- D. SSL /TLS Service Profile
- E. CRT
正解: A,E
質問 21
How does Panorama prompt VMware NSX to quarantine an in6erface VM??
- A. SNMP Server Profile
- B. Syslog Server Profile
- C. Email Server Profile
- D. HTTP Server Profile
正解: B
質問 22
An administrator wants multiple web servers in the DMZ to receive connections from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10 1.22 Based on the information shown in the age, which NAT rule will forward web-browsing traffic correctly?
A)
B)
C)
D)
- A. Option D
- B. Option C
- C. Option B
- D. Option A
正解: D
質問 23
What will be the egress interface if the traffic's ingress interface is Ethernet 1/6 sourcing form 192.168.11.3 and to the destination 10.46.41.113.during the.
- A. ethernet 1/5
- B. ethernet 1/7
- C. ethernet 1/6
- D. ethernet 1/3
正解: D
質問 24
The firewall identified a popular application as a unknown-tcp. Which options are available to identify the application? (Choose two.)
- A. Submit an App-ID request to Palo Alto Networks.
- B. Create a custom application.
- C. Create a Security policy to identify the customer application.
- D. Create a customer object for the customer application server to identify the custom application.
正解: B,D
質問 25
Which option would an administration choose to define the certificate and protect that Panorama and its managed devices uses for SSL/ITS services?
- A. Configure on SSL/TLS Profile.
- B. Set up Security policy rule to allow SSL communication.
- C. Set Up SSL/TLS under Policies > Service/URL Category > Service.
- D. Configure a Decryption Profile and select SSL/TLS services.
正解: A
質問 26
View the GlobalProtect configuration screen capture.
What is the purpose of this configuration?
- A. It configures the tunnel address of all internal clients lo an IP address range starting at 192 168 10 1.
- B. It enables a Client to perform a reverse DNS lookup on 192 .168. 10 .1. to delect it is an internal client.
- C. It forces an internal client to connect to an internal gateway at IP address 192 168 10 I.
- D. It forces the firewall to perform a dynamic DNS update, Which adds the internal gateway's hostname and IP address to the DNS server.
正解: B
質問 27
If the firewall is configured for credential phishing prevention using the "Domain Credential Filter" method, which login will be detected as credential theft?
- A. First four letters of the username matching any valid corporate username.
- B. Matching any valid corporate username.
- C. Using the name user's corporate username and password.
- D. Mapping to the IP address of the logged-in user.
正解: D
質問 28
Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?
- A. SSL certificates must be generated
- B. SSH keys must be manually generated
- C. No prerequisites are required
- D. Both SSH keys and SSL certificates must be generated
正解: C
質問 29
Which virtual router feature determines if a specific destination IP address is reachable'?
- A. Path Monitoring
- B. Ping-Path
- C. Heartbeat Monitoring
- D. Failover
正解: A
質問 30
An administrator is using Panorama and multiple Palo Alto Networks NGFWs. After upgrading all devices to the latest PAN-OS software, the administrator enables logs forwarding from the firewalls to panorama Pre-existing logs from the firewall are not appearing in Panorama.
Which action would enables the firewalls to send their preexisting logs to Panorama?
- A. The- log database will need to be exported from the firewall and manually imported into Panorama.
- B. A CLI command will forward the pre-existing logs to Panorama.
- C. Use the import option to pull logs panorama.
- D. Use the ACC to consolidate pre-existing logs.
正解: B
質問 31
An administrator has left a firewall to used default port for all management services.
Which three function performed by the dataplane? (Choose three.)
- A. NAT
- B. NTP
- C. file blocking
- D. WildFire updates
- E. antivirus
正解: A,B,D
質問 32
A web server is hosted in the DMZ and the server re configured to listen for income connections on TCP port
443. A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server host its contents over Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule.
Which combination of service and application, and order of Security policy rules needs to be configured to allow cleaned web-browsing traffic to the server on tcp/443?
- A. Rule#1 application web-brows.no service application-default, action allow Rule #2 application ssl. Service application-default, action allow
- B. Rule# 1 application: ssl; service application-default: action allow
Role # 2 application web browsing, service application default, action allow - C. Rule #1application web-browsing, service service imp action allow
Rule #2 application ssl. service application -default, action allow - D. Rule#1application: web-biows.no; service service-https action allow
Rule#2 application ssl. Service application-default, action allow
正解: A
質問 33
In High Availability, which information is transferred via the HA data link?
- A. HA state information
- B. User-ID information
- C. heartbeats
- D. session information
正解: D
質問 34
Which three user authentication services can be modified in to provide the Palo Alto Networks NGFW with both username and role names? (Choose three.)
- A. PAP
- B. RADIUS
- C. TACACS+
- D. SAML
- E. Kerberos
- F. LDAP
正解: B,C,F
質問 35
A customer wants to combine multiple Ethernet interfaces into a single virtual interface using Link aggregation.
Which two formats are correct for naming aggregate interlaces? (Choose two.)
- A. aggregate.1
- B. ae.8
- C. ae.1
- D. aggregate.8
正解: B,C
質問 36
An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewalls use layer 3 interface to send traffic to a single gateway IP for the pair.
Which configuration will enable this HA scenario?
- A. Each firewall will have a separate floating IP. and priority will determine which firewall has the primary IP.
- B. The firewalls will share the same interface IP address, and device 1 will use the floating IP if device 0 fails.
- C. The firewall do not use floating IPs in active/active HA.
- D. The two firewalls will share a single floating IP and will use gratuitous ARP to share the floating IP.
正解: A
質問 37
Which feature prevents the submission of login information into website froms?
- A. User-ID
- B. file blocking
- C. credential phishing prevention
- D. data filtering
正解: C
質問 38
The administrator has enabled BGP on a virtual router on the Palo Alto Networks NGFW, but new routes do not seem to be populating the virtual router.
Which two options would help the administrator Troubleshoot this issue? (Choose two.)
- A. View the System logs and look for error messages about BGP
- B. View the ACC lab to isolate routing issues.
- C. Perform a traffic pcap on the NGFW lo see any BGP problems
- D. View the Runtime Stats and look for problems with BGP configuration
正解: B,D
質問 39
If an administrator wants to decrypt SMTP traffic and possesses the saver's certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the server?
- A. SSL Inbound Inspection
- B. SMTP inbound Decryption
- C. TLS Bidirectional Inspection
- D. SSH Forward now proxy
正解: D
質問 40
Which version of Global Protect supports split tunneling based on destination domain, client process, and HTTP/HTTPs video streaming application?
- A. Glovbalprotect version 4.0 with PAn-OS 8.0
- B. Glovbalprotect version 4.1 with PAn-OS 8.0
- C. Glovbalprotect version 4.1 with PAn-OS 8.1
- D. Glovbalprotect version 4.0 with PAn-OS 8.1
正解: D
質問 41
An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs.
The administrator assigns priority 100 to the active firewall.
Which priority is collect tot the passive firewall?
- A. 0
- B. 1
- C. 2
- D. 3
正解: B
質問 42
......
更新されたPDF（2022年最新）実際にあるPalo Alto Networks PCNSC試験問題：https://www.goshiken.com/Palo-Alto-Networks/PCNSC-mondaishu.html
問題集返金保証付きのPCNSC問題集公式問題集：https://drive.google.com/open?id=1y6uk2oVUM9DqR1KIVVy05BPlqQUJnYBx