Online Access Free PCNSE Exam Questions

A firewall engineer needs to update a company's Panorama-managed firewalls to the latest version of PAN- OS. Strict security requirements are blocking internet access to Panorama and to the firewalls. The PAN-OS images have previously been downloaded to a secure host on the network.
Which path should the engineer follow to deploy the PAN-OS images to the firewalls?

• A.Upload the image to Panorama > Dynamic Updates menu, and deploy it to the firewalls.
• B.Upload the image to Panorama > Device Deployment > Software menu, and deploy it to the firewalls.
• C.Upload the image to Panorama > Device Deployment > Dynamic Updates menu, and deploy it to the firewalls.
• D.Upload the image to Panorama > Software menu, and deploy it to the firewalls. *

An internal audit team has requested additional information to be included inside traffic logs forwarded from Palo Alto Networks firewalls to an interal syslog server. Where can the firewall engineer define the data to be added into each forwarded log?

• A.Data Patterns within Objects > Custom Objects
• B.Custom Log Format within Device Server Profiles> Syslog
• C.Logging and Reporting Settings within Device > Setup > Management
• D.Built-in Actions within Objects > Log Forwarding Profile

If a template stack is assigned to a device and the stack includes three templates with overlapping settings, which settings are published to the device when the template stack is pushed?

• A.Depending on the firewall location, Panorama decides with settings to send.
• B.The administrator will be promoted to choose the settings for that chosen firewall.
• C.All the settings configured in all templates.
• D.The settings assigned to the template that is on top of the stack.

An engineer is configuring a firewall with three interfaces:
* MGT connects to a switch with internet access.
* Ethernet1/1 connects to an edge router.
* Ethernet1/2 connects to a visualization network.
The engineer needs to configure dynamic updates to use a dataplane interface for internet traffic. What should be configured in Setup > Services > Service Route Configuration to allow this traffic?

• A.Set DNS and Palo Alto Networks Services to use the ethernet1/1 source interface.
• B.Set DNS and Palo Alto Networks Services to use the MGT source interface.
• C.Set DNS and Palo Alto Networks Services to use the ethernet1/2 source interface.
• D.Set DDNS and Palo Alto Networks Services to use the MGT source interface.

Which two methods can be configured to validate the revocation status of a certificate? (Choose two.)

• A.OCSP
• B.CRL
• C.SSL/TLS Service Profile
• D.CRT
• E.Cert-Validation-Profile