Online Access Free PCNSE6 Exam Questions

A Palo Alto Networks firewall has the following interface configuration;

Hosts are directly connected on the following interfaces: Ethernet 1/6 - Host IP 192.168.62.2 Ethernet 1/3 - Host IP 10.46.40.63
The security administrator is investigating why ICMP traffic between the hosts is not working.
She first ensures that ail traffic is allowed between zones based on the following security policy rule:

The routing table of the firewall shows the following output:

Which interface configuration change should be applied to ethernet1/6 to allow the two hosts to communicate based on this information?

• A.Change the Virtual Router setting to VR1.
• B.Change the configured zone to DMZ.
• C.Change the Management Profile.
• D.Change the security policy to explicitly allow ICMP on this interface.

In the following display, ethernetl/6 is configured with an interface management profile that allows ping with no restriction on the source address:

Given the following security policy rule base:

What is the result of a ping sent from an address on the Trust-L3 zone to the IP address of ethernet1/6?

• A.The traffic will be dropped by the firewall.
• B.The interface will respond.
• C.The firewall will send an ICMP redirect message to the client.
• D.The client will receive an ICMP "destination unreachable" packet.

A network administrator uses Panorama to push security policies to managed firewalls at branch offices.
Which policy type should be configured on Panorama if the administrator wishes to allow local administrators at the branch office sites to override these policies?

• A.Pre Rules
• B.Implicit Rules
• C.Default Rules
• D.Post Rules

A security architect has been asked to implement User-ID in a MacOS environment with no enterprise email, using a Sun LDAP server for user authentication.
In this environment, which two User-ID methods are effective for mapping users to IP addresses? Choose 2 answers

• A.Terminal Server Agent
• B.Captive Portal
• C.GlobalProtect
• D.Mac OS Agent

A hotel chain is using a system to centrally control a variety of items in guest rooms. The client devices in each guest room communicate to the central controller using TCP and frequently disconnect due to a premature timeouts when going through a Palo Alto Networks firewall.
Which action will address this issue without affecting all TCP traffic traversing the firewall?

• A.Create an application override policy, assigning the server-to-client traffic to a custom application.
• B.Create a security policy without security profiles, allowing the client-to-server traffic.
• C.Create an application with a specified TCP timeout and assign traffic to it with an application override policy.
• D.Create an application override policy, assigning the client-to-server traffic to a custom application.