[Q22-Q37] Exam Passing Guarantee Dec 11, 2024 PCNSC Exam with Accurate Quastions! : IT Certification Exam Braindumps : http://blog.braindumpsit.com

Q22. An administrator sees several inbound sessions identified as unknown tcp in the Traffic logs. The administrator determines that these sessions are from external users accessing the company’s propriety accounting application. The administrator wants to reliability identity this as their accounting application and to scan this traffic for threats.
Which option would achieve this result?

Create an Application Override policy and a custom threat signature for the application.

Create a custom App-ID and use the “ordered condition cheek box.

Create an Application Override policy

Create a custom App-ID and enable scanning on the advanced tab.

Q23. An administrator has enabled OSPF on a virtual router on the NGFW OSPF is not adding new routes to the virtual router.
Which two options enable the administrator top troubleshoot this issue? (Choose two.)

Perform a traffic pcap at the routing stage.

View System logs.

Add a redistribution profile to forward as BGP updates.

View Runtime Status virtual router.

Q24. View the GlobalProtect configuration screen capture.
What is the purpose of this configuration?

It forces an internal client to connect to an internal gateway at IP address 192 168 10 I.

It configures the tunnel address of all internal clients lo an IP address range starting at 192 168 10 1.

It forces the firewall to perform a dynamic DNS update, Which adds the internal gateway’s hostname and IP address to the DNS server.

It enables a Client to perform a reverse DNS lookup on 192 .168. 10 .1. to delect it is an internal client.

Q25. Which three user authentication services can be modified in to provide the Palo Alto Networks NGFW with both username and role names? (Choose three.)

PAP

SAML

LDAP

TACACS+

RADIUS

Kerberos

Q26. What is the purpose of the WildFire Analysis Profile in a security policy?

To specify which files are sent to WildFire for analysis

To configure the WildFire subscription settings

To enable WildFire to analyze all network traffic

To define the action to be taken on files analyzed by WildFire

Q27. Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?

No prerequisites are required

SSH keys must be manually generated

Both SSH keys and SSL certificates must be generated

SSL certificates must be generated

Q28. TAC has requested a PCAP on your Panorama lo see why the DNS app is having intermittent issues resolving FODN What is the appropriate CLI command1*

tcp dump snaplen 53 filter “tcp 53”

tcpdump snaplen 0 filter “port 53”

tcp dump snap-en 0 filter “app dns”

tcpdump snaplen 53 filter “port 53”

Q29. The firewall identified a popular application as a unknown-tcp. Which options are available to identify the application? (Choose two.)

Create a Security policy to identify the customer application.

Create a customer object for the customer application server to identify the custom application.

Submit an App-ID request to Palo Alto Networks.

Create a custom application.

Q30. Which CLI command enables an administrator to view detail about the firewall including uptime. PAN -OS version, and serial number?

debug system details

Show system detail

Show system info

Show session info

Q31. Which Palo Alto Networks feature allows you to create dynamic security policies based on the behavior of the devices in your network?

Behavioral Threat Detection

Cortex XDR

App-ID

Dynamic Address Groups

Q32. An administrator pushes a new configuration from panorama to a pair of firewalls that are configured as active/passive HA pair.
Which NGFW receives the configuration from panorama?

the active firewall, which then synchronizes to the passive firewall

the passive firewall, which then synchronizes to the active firewall

both the active and passive firewalls independently, with no synchronization afterward

both the active and passive firewalls, which then synchronizes with each other

Q33. Match the App-ID adoption task with its order in the process.

Q34. A web server is hosted in the DMZ and the server re configured to listen for income connections on TCP port
443. A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server host its contents over Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule.
Which combination of service and application, and order of Security policy rules needs to be configured to allow cleaned web-browsing traffic to the server on tcp/443?

Rule# 1 application: ssl; service application-default: action allow
Role # 2 application web browsing, service application default, action allow

Rule #1application web-browsing, service service imp action allow
Rule #2 application ssl. service application -default, action allow

Rule#1 application web-brows.no service application-default, action allow Rule #2 application ssl. Service application-default, action allow

Rule#1application: web-biows.no; service service-https action allow
Rule#2 application ssl. Service application-default, action allow

Q35. Which category of Vulnerability Signatures is most likely to trigger false positive alerts?

code-execution

phishing

info-leak

brute-force

Q36. Which two action would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL forward proxy? (Choose two.)

Configure an EDL to pull IP Addresses of known sites resolved from a CRL.

Create a Security Policy rule with vulnerability Security Profile attached.

Create a no-decrypt Decryption Policy rule.

Enable the “Block seasons with untrusted Issuers- setting.

Configure a Dynamic Address Group for untrusted sites.

Q37. Which of the following is a primary use case for the Decryption Broker feature?

Managing multiple decryption rules

Sharing decrypted traffic with multiple security appliances

Decrypting outbound SSL traffic

Aggregating traffic logs from different sources