Question 1

Which two options prevents the firewall from capturing traffic passing through it? (Choose two.)

AThe firewall is in milti-vsys mode.

BThe traffic does not match the packet capture filter

CThe traffic is offloaded.

DThe firewall's DP CPU is higher than 50%

Answer : B, C

Question 2

Which two action would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL forward proxy? (Choose two.)

AConfigure an EDL to pull IP Addresses of known sites resolved from a CRL.

BCreate a Security Policy rule with vulnerability Security Profile attached.

CCreate a no-decrypt Decryption Policy rule.

DEnable the 'Block seasons with untrusted Issuers- setting.

EConfigure a Dynamic Address Group for untrusted sites.

Answer : B, D

Question 3

How does Panorama prompt VMware NSX to quarantine an in6erface VM??

ASyslog Server Profile

BEmail Server Profile

CSNMP Server Profile

DHTTP Server Profile

Answer : A

Question 4

Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)

AUser-ID

BAntivirus

CApplication and Threats

DContent-ID

Answer : B, C

Question 5

Which three user authentication services can be modified in to provide the Palo Alto Networks NGFW with both username and role names? (Choose three.)

APAP

BSAML

CLDAP

DTACACS+

ERADIUS

FKerberos

Answer : C, D, E

Free Palo Alto Networks Certified Network Security Consultant Questions for Palo Alto Networks Certified Network Security Consultant Exam as PDF & Practice Test Software

Question 1

Question 2

Question 3

Question 4

Question 5