Online Access Free PCNSE Exam Questions

Which three statements accurately describe Decryption Mirror? (Choose three.)

• A.Decryption, storage, inspection, and use of SSL traffic are regulated in certain countries.
• B.You should consult with your corporate counsel before activating and using Decryption Mirror in a production environment.
• C.Use of Decryption Mirror might enable malicious users with administrative access to the firewall to harvest sensitive information that is submitted via an encrypted channel
• D.Decryption Mirror requires a tap interface on the firewall
• E.Only management consent is required to use the Decryption Mirror feature.

An administrator wants to use LDAP, TACACS+, and Kerberos as external authentication services for authenticating users. What should the administrator be aware of regarding the authentication sequence, based on the Authentication profile in the order Kerberos LDAP, and TACACS+?

• A.If the authentication times cut for the firs: Authentication profile in the authentication sequence, no further authentication attempts will be made.
• B.The priority assigned to the Authentication profile defines the order of the sequence.
• C.The firewall evaluates the profiles in top-to-bottom order until one Authentication profile successfully authenticates the user.
• D.The firewall evaluates the profiles in the alphabetical order the Authentication profiles have been named until one profile successfully authenticates the user.

A security team has enabled real-time WildFire signature lookup on all its firewalls. Which additional action will further reduce the likelihood of newly discovered malware being allowed through the firewalls?

• A.Increase the frequency of the antivirus dynamic updates
• B.Enable the "Report Grayware Files" option in Device > Setup > WildFire.
• C.Enable the "Hold Mode" option in Objects > Security Profiles > Antivirus.
• D.increase the frequency of the applications and threats dynamic updates.

Refer to Exhibit:

An administrator can not see any Traffic logs from the Palo Alto Networks NGFW in Panorama reports. The configuration problem seems to be on the firewall. Which settings, if configured incorrectly, most likely would stop only Traffic logs from being sent from the NGFW to Panorama?

• A.
• B.
• C.
• D.

A firewall administrator is investigating high packet buffer utilization in the company firewall. After looking at the threat logs and seeing many flood attacks coming from a single source that are dropped by the firewall, the administrator decides to enable packet buffer protection to protect against similar attacks.
The administrator enables packet buffer protection globally in the firewall but still sees a high packet buffer utilization rate.
What else should the administrator do to stop packet buffers from being overflowed?

• A.Add a Zone Protection profile to the affected zones.
• B.Add the default Vulnerability Protection profile to all security rules that allow traffic from outside.
• C.Enable packet buffer protection for the affected zones.
• D.Apply DOS profile to security rules allow traffic from outside.