PCNSE Exam Question 116
Which Zone Pair and Rule Type will allow a successful connection for a user on the internet zone to a web server hosted in the DMZ zone? The web server is reachable using a destination Nat policy in the Palo Alto Networks firewall.
PCNSE Exam Question 117
Which option enables a Palo Alto Networks NGFW administrator to schedule Application and Threat updates while applying only new content-IDs to traffic?
PCNSE Exam Question 118
An internal system is not functioning. The firewall administrator has determined that the incorrect egress interface is being used. After looking at the configuration, the administrator believes that the firewall is not using a static route.
What are two reasons why the firewall might not use a static route? (Choose two.)
What are two reasons why the firewall might not use a static route? (Choose two.)
PCNSE Exam Question 119
An engineer is creating a security policy based on Dynamic User Groups (DUG) What benefit does this provide?
PCNSE Exam Question 120
A network administrator wants to deploy GlobalProtect with pre-logon for Windows 10 endpoints and follow Palo Alto Networks best practices.
To install the certificate and key for an endpoint, which three components are required? (Choose three.)
To install the certificate and key for an endpoint, which three components are required? (Choose three.)