Online Access Free PCNSE7 Exam Questions

A company needs to preconfigure firewalls to be sent to remote sites with the least amount of reconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.
Which VPN configuration would adapt to changes when deployed to the future site?

• A.Preconfigured PPTP Tunnels
• B.Preconfigured GlobalProtect client
• C.Preconfigured GlobalProtect satellite
• D.Preconfigured PIsec tunnels

Which Captive Portal mode must be configured to support MFA authentication?

• A.NTLM
• B.Single Sign-On
• C.Transparent
• D.Redirect

When configuring a GlobalProtect Portal, what is the purpose of specifying an Authentication Profile?

• A.To enable user authentication to the Portal
• B.To enable client machine authentication to the Portal
• C.To enable Portal authentication to the Gateway
• D.To enable Gateway authentication to the Portal

After pushing a security policy from Panorama to a PA-3020 firwall, the firewall administrator notices that traffic logs from the PA-3020 are not appearing in Panorama's traffic logs. What could be the problem?

• A.None of the firwwall's policies have been assigned a Log Forwarding profile
• B.The firewall is not licensed for logging to this Panorama device.
• C.Panorama is not licensed to receive logs from this particular firewall.
• D.A Server Profile has not been configured for logging to this Panorama device.

An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

• A.Importation of a certificate from an HSM
• B.Security policy rule allowing SSL to the target server
• C.Firewall connectivity to a CRL
• D.Root certificate imported into the firewall with "Trust" enabled