PCNSE Exam Question 251
A security engineer has configured a GlobalProtect portal agent with four gateways.
Which GlobalProtect Gateway will users connect to based on the chart provided?

Which GlobalProtect Gateway will users connect to based on the chart provided?

PCNSE Exam Question 252
An administrator wants to upgrade a firewall HA pair to PAN-OS 10.1. The firewalls are currently running PAN-OS 8.1.17.
Which upgrade path maintains synchronization of the HA session (and prevents network outage)?
Which upgrade path maintains synchronization of the HA session (and prevents network outage)?
PCNSE Exam Question 253
An engineer is configuring secure web access (HTTPS) to a Palo Alto Networks firewall for management.
Which profile should be configured to ensure that management access via web browsers is encrypted with a trusted certificate?
Which profile should be configured to ensure that management access via web browsers is encrypted with a trusted certificate?
PCNSE Exam Question 254
An engineer needs to configure a standardized template for all Panorama-managed firewalls.
These settings will be configured on a template named "Global" and will be included in all template stacks.
Which three settings can be configured in this template? (Choose three.)
These settings will be configured on a template named "Global" and will be included in all template stacks.
Which three settings can be configured in this template? (Choose three.)
PCNSE Exam Question 255
An administrator is configuring SSL decryption and needs to ensure that all certificates for both SSL Inbound inspection and SSL Forward Proxy are installed properly on the firewall.
When certificates are being imported to the firewall for these purposes, which three certificates require a private key? (Choose three.)
When certificates are being imported to the firewall for these purposes, which three certificates require a private key? (Choose three.)
