Online Access Free PaloAltoNetworks.PCNSE.v2023-04-22.q108 Practice Test (Page 7)

PCNSE Exam Question 26

What is considered the best practice with regards to zone protection?

A.Set the Alarm Rate threshold for event-log messages to high severity or critical severity

B.Review DoS threat activity (ACC > Block Activity) and look for patterns of abuse

C.Use separate log-forwarding profiles to forward DoS and zone threshold event logs separately from other threat logs

D.If the levels of zone and DoS protection consume too many firewall resources, disable zone protection

PCNSE Exam Question 27

When using SSH keys for CLI authentication for firewall administration, which method is used for authorization?

A.Local

B.LDAP

C.Kerberos

D.Radius

PCNSE Exam Question 28

A network administrator wants to use a certificate for the SSL/TLS Service Profile.
Which type of certificate should the administrator use?

A.certificate authority (CA) certificate

B.client certificate

C.machine certificate

D.server certificate

PCNSE Exam Question 29

Which configuration is backed up using the Scheduled Config Export feature in Panorama?

A.Panorama running configuration and running configuration of all managed devices

B.Panorama candidate configuration

C.Panorama candidate configuration and candidate configuration of all managed devices

D.Panorama running configuration

PCNSE Exam Question 30

An administrator wants multiple web servers In the DMZ to receive connections initiated from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10.1.1.22.
Based on the image, which NAT rule will forward web-browsing traffic correctly?