Online Access Free PCNSE6 Exam Questions

Which two steps are required to make Microsoft Active Directory users appear in the firewall's traffic log? Choose 2 answers

• A.Enable User-ID on the zone object for the destination zone.
• B.Run the User-ID Agent using an Active Directory account that has "event log viewer" permissions.
• C.Run the User-ID Agent using an Active Directory account that has "domain administrator" permissions.
• D.Configure a RADIUS server profile to point to a domain controller.
• E.Enable User-ID on the zone object for the source zone.

It is discovered that WebandNetTrends Unlimited's new web server software produces traffic that the Palo Alto Networks firewall sees as "unknown-tcp" traffic.
Which two configurations would identify the application while preserving the ability of the firewall to perform content and threat detection on the traffic? Choose 2 answers

• A.A custom application and an application override policy that assigns traffic going to and from the web server to the custom application
• B.A custom application, with a name properly describing the new web server s purpose
• C.An application override policy that assigns the new web server traffic to the built-in application "web-browsing"
• D.A custom application with content and threat detection enabled, which includes a signature, identifying the new web server s traffic

Where can the maximum concurrent SSL VPN Tunnels be set for Vsys2 when provisioning a Palo Alto Networks firewall for multiple virtual systems?

• A.In the GUI under Device->Setup->Session->Session Settings
• B.In the GUI under Device->Virtual Systems->Vsys2->Resource
• C.In the GUI under Network->Global Protect->Portal->Vsys2
• D.In the GUI under Network->Global Protect->Gateway->Vsys2

In the following display, ethernetl/6 is configured with an interface management profile that allows ping with no restriction on the source address:

Given the following security policy rule base:

What is the result of a ping sent from an address on the Trust-L3 zone to the IP address of ethernet1/6?

• A.The firewall will send an ICMP redirect message to the client.
• B.The interface will respond.
• C.The client will receive an ICMP "destination unreachable" packet.
• D.The traffic will be dropped by the firewall.

Which three engines are built into the Single-Pass Parallel Processing Architecture? Choose 3 answers

• A.Group Identification (Group-ID)
• B.Threat Identification (Threat-ID)
• C.Application Identification (App-ID)
• D.Content Identification (Content-ID)
• E.User Identification (User-ID)