PCNSE Exam Practice Test: Palo Alto Network Security Engineer Exam Questions

An administrator is receiving complaints about application performance degradation. After checking the CC, the administrator observes that there is an excessive amount of SSL traffic. Which three elements should the administrator configure to address this issue? (Choose three.)

An engineer is troubleshooting a traffic-routing issue. What is the correct packet-flow sequence?

An enterprise Information Security team has deployed policies based on AD groups to restrict user access to critical infrastructure systems. However, a recent phishing campaign against the organization has prompted Information Security to look for more controls that can secure access to critical assets. For users that need to access these systems, Information Security wants to use PAN-OS multi-factor authentication (MFA) integration to enforce MF

A network security administrator has an environment with multiple forms of authentication. There is a network access control system in place that authenticates and restricts access for wireless users, multiple Windows domain controllers, and an MDM solution for company-provided smartphones. All of these devices have their authentication events logged. Given the information, what is the best choice for deploying User-ID to ensure maximum coverage?

Why would a traffic log list an application as "not-applicable''?

When you import the configuration of an HA pair into Panorama, how do you prevent the import from affecting ongoing traffic?

During the process of developing a decryption strategy and evaluating which websites are required for corporate users to access, several sites have been identified that cannot be decrypted due to technical reasons. In this case, the technical reason is unsupported ciphers. Traffic to these sites will therefore be blocked if decrypted. How should the engineer proceed?

lf an administrator wants to apply QoS to traffic based on source, what must be specified in a QoS policy rule?

An engineer is monitoring an active/passive high availability (HA) firewall pair. Which HA firewall state describes the firewall that is experiencing a failure of a monitored path?

An engineer needs to configure a standardized template for all Panorama-managed firewalls. These settings will be configured on a template named "Global" and will be included in all template stacks. Which three settings can be configured in this template? (Choose three.)