PCNSE7無料問題集「Palo Alto Networks Certified Network Security Engineer」

質問 1

When is it necessary to activate a license when provisioning a new Palo Alto Networks firewall?

（A）When configuring User Activity Reports

（B）When configuring Certificate Profiles

（C）When configuring Antivirus Dynamic Updates

（D）When configuring GlobalProtect portal

正解：C 解答を投票する

質問 2

Which two statements are correct for the out-of-box configuration for Palo Alto Networks NGFWs? (Choose two)

（A）The devices are licensed and ready for deployment.

（B）The interface are pingable.

（C）The management interface has an IP address of 192.168.1.1 and allows SSH and HTTPS connections.

（D）The devices are pre-configured with a virtual wire pair out the first two interfaces.

（E）A default bidirectional rule is configured that allows Untrust zone traffic to go to the Trust zone.

正解：A、C 解答を投票する

質問 3

An administrator is configuring an IPSec VPN to a Cisco ASA at the administrator's home and experiencing issues completing the connection. the following is the output from the command:

What could be the cause of this problem?

（A）The dead peer detection settings do not match between the Palo Alto Networks Firewall and the ASA.

（B）The Proxy IDs on the Palo Alto Networks Firewall do not match the setting on the ASA.

（C）The public IP addresses do not match for both the Palo Alto Networks Firewall and the ASA.

（D）The shared secrets do not match between the Palo Alto Networks Firewall and the ASA.

正解：C 解答を投票する

質問 4

Given the following table.

Which configuration change on the firewall would cause it to use 10.66.24.88 as the next hop for the 192.168.93.0/30 network?

（A）Configuring the administrative Distance for RIP to be lower than that of OSPF Int.

（B）Configuring the metric for RIP to be lower than that OSPF Ext.

（C）Configuring the metric for RIP to be higher than that of OSPF Int.

（D）Configuring the administrative Distance for RIP to be higher than that of OSPF Ext.

正解：A 解答を投票する

質問 5

An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against worms and trojans.
Which Security Profile type will protect against worms and trojans?

（A）Antivirus

（B）Instruction Prevention

（C）Anti-Spyware

（D）File Blocking

正解：A 解答を投票する

質問 6

Which two mechanisms help prevent a spilt brain scenario an Active/Passive High Availability (HA) pair? (Choose two)

（A）Configure the management interface as HA3 Backup

（B）Configure the management interface as HA2 Backup

（C）Configure ethernet1/1 as HA3 Backup

（D）Configure the management interface as HA1 Backup

（E）Configure Ethernet 1/1 as HA1 Backup
CConfigure Ethernet 1/1 as HA2 Backup

正解：C、E 解答を投票する

質問 7

Which Public Key infrastructure component is used to authenticate users for GlobalProtect when the Connect Method is set to pre-logon?

（A）Machine certificate

（B）Certificate revocation list

（C）Online Certificate Status Protocol

（D）Trusted root certificate

正解：A 解答を投票する

質問 8

Refer to the exhibit.

An administrator cannot see any if the Traffic logs from the Palo Alto Networks NGFW on Panorama. The configuration problem seems to be on the firewall side. Where is the best place on the Palo Alto Networks NGFW to check whether the configuration is correct? A)

B)

C)

D)

（A）Option D

（B）Option B

（C）Option C

（D）Option A

正解：A 解答を投票する

質問 9

What can missing SSL packets when performing a packet capture on dataplane interfaces?

（A）The missing packets are offloaded to the management plane CPU

（B）The packets are not captured because they are encrypted

（C）The packets are hardware offloaded to the offloaded processor on the dataplane

（D）There is a hardware problem with offloading FPGA on the management plane

正解：C 解答を投票する

質問 10

An administrator pushes a new configuration from Panorama to a pair of firewalls that are configured as an active/passive HA pair.
Which NGFW receives the configuration from Panorama?

（A）Both the active and passive firewalls, which then synchronize with each other

（B）The Passive firewall, which then synchronizes to the active firewall

（C）The active firewall, which then synchronizes to the passive firewall

（D）Both the active and passive firewalls independently, with no synchronization afterward

正解：A 解答を投票する

質問 11

What must be used in Security Policy Rule that contain addresses where NAT policy applies?

（A）Pre-NAT addresse and Pre-NAT zones

（B）Post-Nat addresses and Pre-NAT zones

（C）Post-NAT addresse and Post-Nat zones

（D）Pre-NAT addresse and Post-Nat zones

正解：D 解答を投票する

PCNSE7 無料問題集「Palo Alto Networks Certified Network Security Engineer」

弊社を連絡する

関連リンク

トップ試験