PCNSE 無料問題集「Palo Alto Networks Certified Network Security Engineer」

（A）show session all filter nat-rule-source

（B）show running nat-rule-ippool rule "rule_name

（C）show running nat-policy

（D）show session all filter nat source

（A）Enable Advanced Routing Engine in Device > Setup > Session > Session Settings, then commit and reboot.

（B）Enable Advanced Routing in General Settings of Device > Setup > Management, then commit and reboot.

（C）Enable Advanced Routing in Network > Virtual Routers > Router Settings > General, then commit and reboot.

（D）Enable Advanced Routing in Network > Virtual Routers > Redistribution Profiles and then commit.

（A）East

（B）West

（C）Central

（D）South

（A）DHCP Server

（B）IKEv1

（C）OSPF

（D）DHCPv6 Client with Prefix Delegation

（A）Traffic and threat logs will not be forwarded unless the relevant Log Forwarding profile is attached to the security rules

（B）Traffic and threat logs will not be forwarded unless the relevant Log Forwarding profile is selected in
"Logging and Reporting Settings"

（C）The logs will not contain the names of the identified applications unless the "Enable enhanced application logging" option is selected

（D）App-ID engine will not identify any application traffic unless the "Enable enhanced application logging" option is selected

（A）network 192.188 28 32/27 with server type Microsoft

（B）the IP-address and corresponding server type (Microsoft Active Directory or Microsoft Exchange) for each of the six servers

（C）one IP address of a Microsoft Active Directory server and "Auto Discover" enabled to automatically obtain all five of the other servers

（D）network 192.168.28.32/28 with server type Microsoft Active Directory and network 192.168.28.40/28 Exchange

（A）User logon

（B）Push

（C）SSH key

（D）One-Time Password

（E）Short message service

（A）Install the Well-Known-Intermediate-CA and Well-Known-Root-CA certificates on all end-user systems in the user and local computer stores

（B）Navigate to Device > Certificate Management > Certificates > Device Certificates, import Well-Known- Intermediate-CA and Well-Known-Root-CA, select the Trusted Root CA check box, and commit the configuration

（C）Clear the Forward Untrust Certificate check box on the Untrusted-CA certificate and commit the configuration

（D）Navigate to Device > Certificate Management > Certificates > Default Trusted Certificate Authorities, import Well-Known-Intermediate-CA and Well-Known-Root-CA, select the Trusted Root CA check box, and commit the configuration

（A）Enable certificate revocation checking to deny access to sites with revoked certificates. -"

（B）Check for expired certificates and take appropriate actions to block or allow access based on business needs.

（C）Contact the site administrator with the expired certificate to request updates or renewal.

（D）Add the server's hostname to the SSL Decryption Exclusion List to allow traffic without decryption.

（A）ethernet1/5

（B）ethernet1/6

（C）ethernet1/3

（D）ethernet1/7

（A）Enable User-ID.

（B）Create a URL filtering profile

（C）Create a decryption policy rule.

（D）Create an anti-virus profile.

（E）Configure a URL profile to block the phishing category.

（A）Change the DNS server on the global template.

（B）Override the DNS server on the template stack.

（C）Configure a service route for DNS on a different interface.

（D）Configure the DNS server locally on the firewall.

（A）Kerberos single sign-on

（B）GlobalProtect client

（C）Local database authentication

（D）PingID

（E）Cloud authentication service

（A）It matches to the New App-IDs in the most recently installed content releases.

（B）It matches to the New App-IDs installed since the last time the firewall was rebooted.

（C）It matches to the New App-IDs downloaded in the last 90 days.

（D）It matches to the New App-IDs downloaded in the last 30 days.

（A）Exclude video traffic

（B）Enable decryption

（C）Block traffic that is not work-related

（D）Create a Tunnel Inspection policy