Free Palo Alto Networks PCNSE Exam Dumps Questions & Answers

An administrator is troubleshooting application traffic that has a valid business use case, and observes the following decryption log message: "Received fatal alert UnknownCA from client." How should the administrator remediate this issue?

• A.  Check for expired certificates and take appropriate actions to block or allow access based on business needs.
• B.  Enable certificate revocation checking to deny access to sites with revoked certificates. -"
• C.  Contact the site administrator with the expired certificate to request updates or renewal.
• D.  Add the server's hostname to the SSL Decryption Exclusion List to allow traffic without decryption.

Which three authentication types can be used to authenticate users? (Choose three.)

• A.  PingID
• B.  Kerberos single sign-on
• C.  Local database authentication
• D.  Cloud authentication service
• E.  GlobalProtect client

An internal audit team has requested additional information to be included inside traffic logs forwarded from Palo Alto Networks firewalls to an interal syslog server. Where can the firewall engineer define the data to be added into each forwarded log?

• A.  Built-in Actions within Objects > Log Forwarding Profile
• B.  Logging and Reporting Settings within Device > Setup > Management
• C.  Data Patterns within Objects > Custom Objects
• D.  Custom Log Format within Device Server Profiles> Syslog

A company wants to add threat prevention to the network without redesigning the network routing.
What are two best practice deployment modes for the firewall? (Choose two.)

• A.  Layer2
• B.  Layer3
• C.  TAP
• D.  VirtualWire

An engineer is configuring a firewall with three interfaces:
* MGT connects to a switch with internet access.
* Ethernet1/1 connects to an edge router.
* Ethernet1/2 connects to a visualization network.
The engineer needs to configure dynamic updates to use a dataplane interface for internet traffic. What should be configured in Setup > Services > Service Route Configuration to allow this traffic?

• A.  Set DNS and Palo Alto Networks Services to use the ethernet1/2 source interface.
• B.  Set DNS and Palo Alto Networks Services to use the MGT source interface.
• C.  Set DNS and Palo Alto Networks Services to use the ethernet1/1 source interface.
• D.  Set DDNS and Palo Alto Networks Services to use the MGT source interface.