Palo Alto Networks PCNSC Exam Practice Test Instant Access

Question 1

Which of the following must be enabled to use Threat Prevention features such as Anti-Virus and Anti-Spyware on a firewall?

ASecurity Profiles

BWildFire Subscription

CURL Filtering

DGlobalProtect Subscription

Answer : A

Question 2

In an HA (High Availability) setup, what is the purpose of the HA3 link?

ASynchronize session state information

BSynchronize configuration changes

CExchange heartbeats between the devices

DTransmit HA control traffic

Answer : A

Question 3

Which Panorama operational mode is necessary to manage a large number of firewalls and also act as a log collector?

AManagement Only

BLog Collector Only

CManagement and Log Collector

DDedicated Log Collector

Answer : C

Question 4

What type of NAT rule is required to translate an internal server's private IP address to a public IP address for external access?

ASource NAT

BDestination NAT

CDynamic NAT

DBidirectional NAT

Answer : B

Question 5

Which two conditions must be met for a firewall to successfully forward traffic to a syslog server? (Choose two)

AThe syslog server must be defined in the Device > Server Profiles > Syslog section

BA syslog forwarding profile must be created and applied to the appropriate security policies

CThe firewall must be in Virtual Wire mode

DThe syslog server must be reachable over a secure connection

Answer : A, B

Question 6

Which of the following WildFire action settings will ensure that a malicious file is quarantined and prevented from spreading?

AAlert

BAllow

CBlock

DReset-Both

Answer : C

Question 7

In Panorama, what is the correct order of precedence for security policies?

ADevice group pre-rules, shared pre-rules, local rules, device group post-rules, shared post-rules

BShared pre-rules, device group pre-rules, local rules, shared post-rules, device group post-rules

CShared pre-rules, device group pre-rules, local rules, device group post-rules, shared post-rules

DDevice group pre-rules, shared pre-rules, local rules, shared post-rules, device group post-rules

Answer : C

Palo Alto Networks Certified Network Security Consultant Exam Practice Test