Free Palo Alto Networks Certified Network Security Engineer (PAN-OS 10.0) Exam PCNSE Exam Practice Test

An administrator needs to gather information about the CPU utilization on both the management plane and the data plane. Where does the administrator view the desired data?

• Support > Resources
• Application Command and Control Center
• Resources Widget on the Dashboard
• Monitor > Utilization

A standalone firewall with local objects and policies needs to be migrated into Panorama. What procedure should you use so Panorama is fully managing the firewall?

• Use the 'import device configuration to Panorama' operation, commit to Panorama, then 'export or push device config bundle' to push the configuration.
• Use the 'import Panorama configuration snapshot' operation, commit to Panorama, then 'export or push device config bundle' to push the configuration.
• Use the 'import device configuration to Panorama' operation, commit to Panorama, then perform a device-group commit push with 'include device and network templates'.
• Use the 'import Panorama configuration snapshot' operation, commit to Panorama, then perform a device-group commit push with 'include device and network templates'.

An engineer has been given approval to upgrade their environment to the latest version of PAN-OS.The environment consists of both physical and virtual firewalls, a virtual Panorama, and virtual log collectors.What is the recommended order of operational steps when upgrading?

• Upgrade the log collectors, upgrade the firewalls, upgrade Panorama
• Upgrade the firewalls, upgrade log collectors, upgrade Panorama
• Upgrade Panorama, upgrade the log collectors, upgrade the firewalls
• Upgrade the firewalls, upgrade Panorama, upgrade the log collectors

An administrator has been tasked with configuring decryption policies,Which decryption best practice should they consider?

• Consider the local, legal, and regulatory implications and how they affect which traffic can be decrypted.
• Decrypt all traffic that traverses the firewall so that it can be scanned for threats.
• Place firewalls where administrators can opt to bypass the firewall when needed.
• Create forward proxy decryption rules without Decryption profiles for unsanctioned applications.

A customer would like to support Apple Bonjour in their environment for ease of configuration.Which type of interface in needed on their PA-3200 Series firewall to enable Bonjour Reflector in a segmented network?

• Virtual Wire interface
• Loopback interface
• Layer 3 interface
• Layer 2 interface

When a new firewall joins a high availability (HA) cluster, the cluster members will synchronize all existing sessions over which HA port?

• HA1
• HA3
• HA2
• HA4

Which are valid ACC GlobalProtect Activity tab widgets? (Choose two.)

• Successful GlobalProtect Deployed Activity
• GlobalProtect Deployment Activity
• GlobalProtect Quarantine Activity
• Successful GlobalProtect Connection Activity

When you troubleshoot an SSL Decryption issue, which PAN-OS CL1 command do you use to check the details of the Forward Trust certificate. Forward Untrust certificate, and SSL Inbound Inspection certificate?

• show system setting ssl-decrypt certificate
• show system setting ssl-decrypt certs
• debug dataplane show ssl-decrypt ssl-certs
• show system setting ssl-decrypt certificate-cache

When backing up and saving configuration files, what is achieved using only the firewall and is not available in Panorama?

• Export device state
• Load configuration version
• Load named configuration snapshot
• Save candidate config

Which two profiles should be configured when sharing tags from threat logs with a remote User-ID agent? (Choose two.)

• Log Ingestion
• HTTP
• Log Forwarding
• LDAP