Online Access Free PCNSC Exam Questions

Which category of Vulnerability Signatures is most likely to trigger false positive alerts?

• A.phishing
• B.code-execution
• C.brute-force
• D.info-leak

What type of NAT rule is required to translate an internal server's private IP address to a public IP address for external access?

• A.Bidirectional NAT
• B.Destination NAT
• C.Dynamic NAT
• D.Source NAT

In Panorama the web interface displays the security rules in evaluation order Organize the security rules m the order in which they will be evaluated?

Correct Answer:

Explanation:
In Panorama, security rules are evaluated in a specific order to determine which rule applies to the traffic. The correct evaluation order is as follows:
* Shared pre-rules(evaluated first)
* Device group pre-rules(evaluated second)
* Local firewall rules(evaluated third)
* Device group post-rules(evaluated fourth)
* Shared post-rules(evaluated fifth)
This order ensures that the most generic rules (shared across all devices) are evaluated first, followed by more specific rules at the device group and local firewall levels, and then the post-rules.
References:
* Palo Alto Networks - Panorama Admin Guide:
https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/policy/policy-precedence-and-evaluati
* Palo Alto Networks - Security Policy Evaluation: https://knowledgebase.paloaltonetworks.com

A customer has deployed a GlobalProtect portal and gateway as its remote-access VPN solution for its fleet of Windows 10 laptops The customer wants to use Host information Profile (HIP) data collected at the GlobalProtect gateway throughout its enterprise as an additional means of policy enforcement What additional licensing must the customer purchase?

• A.GlobalProtect license for each firewall that will use HIP data to enforce policy
• B.DNS Security on the perimeter firewall
• C.WildFire license
• D.GlobalProtect license for the gateway firewall

Which touting configuration should you recommend lo a customer who wishes lo actively use multiple pathways to the same destination?

• A.BGP
• B.ECMP
• C.RlPv2
• D.OSPF