PCNSC Practice Exam Questions with Answers Palo Alto Networks Certified Network Security Consultant Certification

Which three authentication faction factors does PAN-OS® software support for MFA? (Choose three.)

Which feature prevents the submission of corporate login information into website forms?

Refer to the exhibit.

A web server in the DMZ is being mapped to a public address through DNAT.

Which Security policy rule will allow traffic to flow to the web server?

Which two options prevents the firewall from capturing traffic passing through it? (Choose two.)

Which User-ID method should b configured to map addresses to usernames for users connected through a terminal server?

A Palo Alto Networks NGFW just submitted a file lo WildFire tor analysis Assume a 5-minute window for analysis. The firewall is configured to check for verdicts every 5 minutes.

How quickly will the firewall receive back a verdict?

An administrator wants multiple web servers in the DMZ to receive connections from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10 1.22

Based on the information shown in the age, which NAT rule will forward web-browsing traffic correctly?

A)

B)

C)

D)

Which three user authentication services can be modified in to provide the Palo Alto Networks NGFW with both username and role names? (Choose three.)

Which DoS protection mechanism detects and prevents session exhaustion attacks?

Which virtual router feature determines if a specific destination IP address is reachable'?

Which Captive Portal mode must becontoured to support MFA authentication?

Which three file types can be forward to WildMFire for analysis a partof the basic WildMFire service?

A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch it connect.

How would an administrator configure the interface to IGbps?

An administrator creates a custom application containing Layer 7 signatures. The latest application and threat dynamic update is downloaded to the same NGFW. THE update contains application that matches the same traffic signatures as the customer application.

Which application should be used to identify traffic traversing the NGFW?

What are two benefits of nested device groups in panorama?(Choose two )

An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewalls use layer 3 interface to send traffic to a single gateway IP for the pair.

Which configuration will enable this HA scenario?

Which event will happen administrator uses an Application Override Policy?