PCNSC Exam Training Practice Tests (Palo Alto Networks Certified Network Security Consultant)]

Question 1

An existing customer who has deployed several Palo Alto Networks Next-Generation Firewalls would like to start using Device-ID to obtain policy rule recommendations They have also purchased a Support license, a Threat license a URL Filtering license, and a WildFire license for each firewall What additional license do they need to purchase"?

A. a Cortex Data Lake license B. an loT Security license (or the perimeter firewall C. an loT Security license for each deployed firewall D. an Enterprise Data Loss Prevention (DLP) license

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

What happens when a packet from an existing session is received by a firewall that

A. The firewall lakes ownership of the session from the peer firewall B. The firewall requests the sender to resend the packet C. The firewall forwards the packet lo the peer firewall over the HA3 link D. The firewall drops the packet to prevent any L3 loops

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

How can you ensure that a Palo Alto Networks firewall does not block traffic during a software update?

A. Use the High Availability feature B. Configure session synchronization C. Schedule the upgrade during a maintenance window D. Enable the Suspend Traffic During Upgrade option

Correct Answer: C

Question 4

In an environment using User-ID, what role does the User-ID agent play?

A. It inspects traffic for malicious content B. It enforces security policies based on IP addresses C. It assigns IP addresses to users D. It maps user identities to IP addresses

Correct Answer: D

Question 5

Which GlobalProtect feature ensures that only trusted endpoints can connect to the network?

A. SSL Decryption B. App-ID C. User-ID D. Host Information Profile (HIP)

Correct Answer: D

Question 6

A customer has a five-year-old firewall in production in the time since the firewall was installed, the IT team deleted unused security policies on a regular basis but they did not remove the address objects and groups that were part ofthese security policies.
What is the best way to delete all of the unused address objects on the firewall?

A. Go to Address Objects under the Objects tab and click on Remove unused objects. B. Using CLI execute requestconfiguration address-objectsremove-unused-objects. C. Import the configuration in Expedition, remove unused address objects, and reimport the configuration. D. Search each address object with Global Find and delete if it shows that the address object is not referenced.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

What is the purpose of the WildFire Analysis Profile in a security policy?

A. To specify which files are sent to WildFire for analysis B. To configure the WildFire subscription settings C. To enable WildFire to analyze all network traffic D. To define the action to be taken on files analyzed by WildFire

Correct Answer: A

Palo Alto Networks Certified Network Security Consultant - PCNSC Exam Practice Test