Exam Questions PCNSE6

Transcription

1 Exam Questions PCNSE6 Palo Alto Networks Certified Network Security Engineer 6.0

2 1.To create a custom signature object for an Application Override Policy, which of the following fields are mandatory? A. Category B. Regular Expressions C. Ports D. Characteristics 2. For non-microsoft clients, what Captive Portal method is supported? A. NTLM Auth B. User Agent C. Local Database D. Web Form Captive Portal 3. Which of the following objects cannot use User-ID as a match criteria? A. Security Policies B. QoS C. Policy Based Forwarding D. DoS Protection E. None of the above Answer: E 4. An Outbound SSL forward-proxy decryption rule cannot be created using which type of zone? A. Virtual Wire B. Tap C. L3 D. L2

3 Answer: A 5. A Palo Alto Networks firewall has the following interface configuration; Hosts are directly connected on the following interfaces: Ethernet 1/6 - Host IP Ethernet 1/3 - Host IP The security administrator is investigating why ICMP traffic between the hosts is not working. She first ensures that ail traffic is allowed between zones based on the following security policy rule: The routing table of the firewall shows the following output: Which interface configuration change should be applied to ethernet1/6 to allow the two hosts to communicate based on this information? A. Change the Management Profile. B. Change the security policy to explicitly allow ICMP on this interface.

4 C. Change the configured zone to DMZ. D. Change the Virtual Router setting to VR1. 6. Which best describes how Palo Alto Networks firewall rules are applied to a session? A. last match applied B. first match applied C. all matches applied D. most specific match applied Answer: B 7. A company has a web server behind their Palo Alto Networks firewall that they would like to make accessible to the public. They have decided to configure a destination NAT Policy rule. Given the following zone information: DMZzone: DMZ-L3 Public zone: Untrust-L3 Web server zone: Trust-L3 Public IP address (Untrust-L3): Private IP address (Trust-L3): What should be configured as the destination zone on the Original Packet tab of the NAT Policy rule? A. DMZ-L3 B. Any C. Untrust-L3 D. Trust-L3 Answer: C 8. What built-in administrator role allows all rights except for the creation of administrative accounts and virtual systems? A. superuser

5 B. vsysadmin C. A custom role is required for this level of access D. deviceadmin 9. What will the user experience when attempting to access a blocked hacking website through a translation service such as Google Translate or Bing Translator? A. A Blocked page response when the URL filtering policy to block is enforced. B. A Success page response when the site is successfully translated. C. The browser will be redirected to the original website address. D. An "HTTP Error 503 Service unavailable" message. Answer: A 10. Company employees have been given access to the GlobalProtect Portal at Assume the following: 1. The firewall is configured to resolve DNS names using the internal DNS server.

6 2. The URL portal.company.com resolves to the external interface of the firewall on the company s external DNS server and to the internal interface of the firewall on the company s internal DNS server. 3. The URL gatewayl.company.com resolves to the external interface of the firewall on the company s external DNS server and to the internal interface of the firewall on the company s internal DNS server. This Gateway configuration will have which two outcomes? Choose 2 answers A. Clients outside the network will be able to connect to the external gateway Gateway1. B. Clients inside the network will be able to connect to the internal gateway Gateway1. C. Clients outside the network will NOT be able to connect to the external gateway Gateway1. D. Clients inside the network will NOT be able to connect to the internal gateway Gateway1. Answer: A,B

7 Powered by TCPDF ( << Practice Test Demo - 2PassEasy >> THANKS FOR TRYING THE DEMO OF OUR PRODUCT Visit Our Site to Purchase the Full Set of Actual PCNSE6 Exam Questions With Answers. We Also Provide Practice Exam Software That Simulates Real Exam Environment And Has Many Self-Assessment Features. Order the PCNSE6 Product From: Money Back Guarantee PCNSE6 Practice Exam Features: * PCNSE6 Questions and Answers Updated Frequently * PCNSE6 Practice Questions Verified by Expert Senior Certified Staff * PCNSE6 Most Realistic Questions that Guarantee you a Pass on Your FirstTry * PCNSE6 Practice Test Questions in Multiple Choice Formats and Updatesfor 1 Year