Online Access Free PCNSC Exam Questions

Which GlobalProtect feature ensures that only trusted endpoints can connect to the network?

• A.User-ID
• B.Host Information Profile (HIP)
• C.SSL Decryption
• D.App-ID

TAC has requested a PCAP on your Panorama lo see why the DNS app is having intermittent issues resolving FODN What is the appropriate CLI command1*

• A.tcp dump snaplen 53 filter "tcp 53"
• B.tcpdump snaplen 0 filter "port 53"
• C.tcpdump snaplen 53 filter "port 53"
• D.tcp dump snap-en 0 filter "app dns"

Your customer has asked you to set up tunnel monitoring on an IPsec VPN tunnel between two offices What three steps are needed to set up tunnel monitoring? (Choose three)

• A.Add an IP address to each tunnel interface
• B.Enable tunnel monitoring on each IPsec tunnel
• C.Restart each IKE gateway
• D.Restart each IPsec tunnel
• E.Create a monitoring profile

In an environment using User-ID, what role does the User-ID agent play?

• A.It inspects traffic for malicious content
• B.It maps user identities to IP addresses
• C.It enforces security policies based on IP addresses
• D.It assigns IP addresses to users

How can you ensure that a Palo Alto Networks firewall does not block traffic during a software update?

• A.Schedule the upgrade during a maintenance window
• B.Use the High Availability feature
• C.Configure session synchronization
• D.Enable the Suspend Traffic During Upgrade option