Online Access Free PCNSE6 Exam Questions

A company has a policy that denies all applications they classify as bad and permits only applications they classify as good. The firewall administrator created the following security policy on the company s firewall:

Which two benefits are gained from having both rule 2 and rule 3 present? Choose 2 answers

• A.Separate Log Forwarding profiles can be applied to rules 2 and 3.
• B.A report can be created that identifies unclassified traffic on the network.
• C.Rule 2 denies traffic flowing across different TCP and UDP ports than rule 3.
• D.Different security profiles can be applied to traffic matching rules 2 and 3.

Which three processor types are found on the data plane of a PA-5050? Choose 3 answers

• A.Network Processor
• B.Multi-Core Security Processor
• C.Protocol Decoder Processor
• D.Signature Match Processor
• E.Management Processor

A hotel chain is using a system to centrally control a variety of items in guest rooms. The client devices in each guest room communicate to the central controller using TCP and frequently disconnect due to a premature timeouts when going through a Palo Alto Networks firewall.
Which action will address this issue without affecting all TCP traffic traversing the firewall?

• A.Create an application override policy, assigning the client-to-server traffic to a custom application.
• B.Create a security policy without security profiles, allowing the client-to-server traffic.
• C.Create an application with a specified TCP timeout and assign traffic to it with an application override policy.
• D.Create an application override policy, assigning the server-to-client traffic to a custom application.

Two firewalls are configured in an Active/Passive High Availability (HA) pair with the following election settings:

Firewall 5050-B is presently in the "Active" state and 5050-A is presently in the "Passive" state. Firewall 5050-B reboots causing 5050-A to become Active.
Which firewall will be in the "Active" state after firewall 5050-B has completed its reboot and is back online?

• A.Firewall 5050-A
• B.Firewall 5050-B
• C.It could be either firewall
• D.Both firewalls are active (split brain)

HOTSPOT
Match each type of report provided by the firewall with its description. Answer options may be used more than once or not at all.

Correct Answer:

Explanation:
PDF Summary Reports - Reports that combine up to 18 custom or predefined reports from the Threat, Application, Traffic, URL Filtering Categories into one document. Report Groups - Reports the combine other custom and predefined reports into a single file to be emailed to one or more recipients. Custom Reports - Reports created by an administrator that filter on conditions and columns User or Groups Activity Reports - Reports on the application use and URL activity for a specific user or a group
Reference: https://www.paloaltonetworks.com/content/dam/paloaltonetworkscom/en_US/assets/pdf/framemaker/61/panorama/Panorama_AdminGuide/section_6.pdf page 151