Free Palo Alto Networks Certified Network Security Engineer (PAN-OS 10.0) Exam PCNSE Exam Practice Test

An administrator wants to use LDAP, TACACS+, and Kerberos as external authentication services for authenticating users. What should the administrator be aware of regarding the authentication sequence, based on the Authentication profile in the order Kerberos LDAP, and TACACS+?

• The firewall evaluates the profiles in the alphabetical order the Authentication profiles have been named until one profile successfully authenticates the user.
• The firewall evaluates the profiles in top-to-bottom order until one Authentication profile successfully authenticates the user.
• The priority assigned to the Authentication profile defines the order of the sequence.
• If the authentication times cut for the firs: Authentication profile in the authentication sequence, no further authentication attempts will be made.

A company is deploying User-ID in their network. The firewall team needs to have the ability to see and choose from a list of usernames and user groups directly inside the Panorama policies when creating new security rules.How can this be achieved?

• By configuring Data Redistribution Client in Panorama > Data Redistribution
• By configuring User-ID group mapping in Panorama > User Identification
• By configuring User-ID source device in Panorama > Managed Devices
• By configuring Master Device in Panorama > Device Groups

What happens when an A/P firewall pair synchronizes IPsec tunnel security associations (SAs)?

• Phase 1 and Phase 2 SAs are synchronized over HA3 links.
• Phase 2 SAs are synchronized over HA2 links.
• Phase 1 and Phase 2 SAs are synchronized over HA2 links.
• Phase 1 SAs are synchronized over HA1 links.

A company requires that a specific set of ciphers be used when remotely managing their Palo Alto Networks appliances.Which profile should be configured in order to achieve this?

• SSH Service profile
• SSL/TLS Service profile
• Certificate profile
• Decryption profile

An administrator connects a new fiber cable and transceiver Ethernet1/1 on a Palo Alto Networks firewall. However, the link does not come up. How can the administrator troubleshoot to confirm the transceiver type, tx-power, rxpower, vendor name, and part number by using the CLI?

• show chassis status slot s1
• show s/stem state filter ethernet1/1
• show s/stem state filter sw.dev interface config
• show s/stem state filter-pretty sys.sl*

What are three prerequisites for credential phishing prevention to function? (Choose three.)

• In the URL filtering profile, use the drop-down list to enable user credential detection.
• Enable Device-ID in the zone.
• Select the action for Site Access for each category.
• Add the URL filtering profile to one or more Security policy rules.
• Set phishing category to block in the URL Filtering profile.

Which GlobalProtect gateway selling is required to enable split-tunneling by access route, destination domain, and application?

• No Direct Access to local networks
• Tunnel mode
• iPSec mode
• Satellite mode

Which statement is correct given the following message from the PanGPA log on the GlobalProtect app?Failed to connect to server at port:47 67

• The PanGPS process failed to connect to the PanGPA process on port 4767
• The GlobalProtect app failed to connect to the GlobalProtect Portal on port 4767
• The PanGPA process failed to connect to the PanGPS process on port 4767
• The GlobalProtect app failed to connect to the GlobalProtect Gateway on port 4767

An administrator needs to gather information about the CPU utilization on both the management plane and the data plane. Where does the administrator view the desired data?

• Support > Resources
• Application Command and Control Center
• Resources Widget on the Dashboard
• Monitor > Utilization

How can Panorama help with troubleshooting problems such as high CPU or resource exhaustion on a managed firewall?

• Panorama provides information about system resources of the managed devices in the Managed Device > Health menu.
• Firewalls send SNMP traps to Panorama wen resource exhaustion is detected Panorama generates a system log and can send email alerts.
• Panorama monitors all firewalls using SNMP. It generates a system log and can send email alerts when resource exhaustion is detected on a managed firewall.
• Panorama provides visibility all the system and traffic logs received from firewalls it does not offer any ability to see or monitor resource utilization on managed firewalls