Palo Alto Network Security Engineer PCNSE Practice Exam Questions

A company has configured a URL Filtering profile with override action on their firewall. Which two profiles are needed to complete the configuration? (Choose two.)

A company wants to add threat prevention to the network without redesigning the network routing. What are two best practice deployment modes for the firewall? (Choose two.)

A firewall engineer reviews the PAN-OS GlobalProtect application and sees that it implicitly uses web- browsing and depends on SSL. When creating a new rule, what is needed to allow the application to resolve dependencies?

An administrator is troubleshooting why video traffic is not being properly classified. If this traffic does not match any QoS classes, what default class is assigned?

Where can a service route be configured for a specific destination IP?

Which three items must be configured to implement application override? (Choose three.)

Which three actions can Panorama perform when deploying PAN-OS images to its managed devices? (Choose three.)

After implementing a new NGFW, a firewall engineer sees a Vol traffic issue going through the firewall. After troubleshooting, the engineer finds that the firewall performs NAT on the voice packets payload and opens dynamic pinholes for media ports. What can the engineer do to solve the VoIP traffic issue?

Which new PAN-OS 11.0 feature supports IPv6 traffic?

Which three external authentication services can the firewall use to authenticate admins into the Palo Alto Networks NGFW without creating administrator account on the firewall? (Choose three.)