Free Palo Alto Networks PCNSC Practice Test & Real Exam Questions
A customer is adding a new site-to-site tunnel from a PaloAlto Networks NGFW to a third party with a policy based VPN peer After the initial configuration is completed and the changes are committed, phase 2 fails to establish Which two changes may be required to fix the issue? (Choose two)
Correct Answer: A,D
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
In Panorama the web interface displays the security rules in evaluation order Organize the security rules m the order in which they will be evaluated?


Correct Answer:

Explanation:
In Panorama, security rules are evaluated in a specific order to determine which rule applies to the traffic. The correct evaluation order is as follows:
* Shared pre-rules(evaluated first)
* Device group pre-rules(evaluated second)
* Local firewall rules(evaluated third)
* Device group post-rules(evaluated fourth)
* Shared post-rules(evaluated fifth)
This order ensures that the most generic rules (shared across all devices) are evaluated first, followed by more specific rules at the device group and local firewall levels, and then the post-rules.
References:
* Palo Alto Networks - Panorama Admin Guide:
https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/policy/policy-precedence-and-evaluati
* Palo Alto Networks - Security Policy Evaluation: https://knowledgebase.paloaltonetworks.com
Which log type would you consult to diagnose why a specific URL is being blocked?
Correct Answer: B
Vote an answer
Which category of Vulnerability Signatures is most likely to trigger false positive alerts?
Correct Answer: B
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
In an environment using User-ID, what role does the User-ID agent play?
Correct Answer: D
Vote an answer
What feature should be used to decrypt and inspect inbound SSL traffic without having to install a certificate on the client devices?
Correct Answer: C
Vote an answer
In a multi-tenant environment, what feature allows you to assign different administrators to different tenants?
Correct Answer: A
Vote an answer
