Palo Alto Networks PCNSC Exam Practice Test Instant Access

Question 1

What configuration is necessary for Active/Active HA to synchronize sessions between peers?

AEnable session synchronization under the HA settings

BUse the same virtual IP address on both peers

CConfigure a floating IP address

DEnable session preemption on both peers

Answer : A

Question 2

Which two log types are necessary to fully investigate a network intrusion? (Choose two)

AURL Filtering log

BTraffic log

CThreat log

DSystem log

Answer : B, C

Question 3

In a multi-tenant environment, what feature allows you to assign different administrators to different tenants?

AAdmin Roles

BDevice Groups

CAccess Domains

DVirtual Systems

Answer : C

Question 4

Which license is required to use the Cortex XDR Managed Threat Hunting service?

ACortex Data Lake license

BWildFire license

CCortex XDR Pro per TB license

DThreat Prevention license

Answer : C

Question 5

When creating a custom application signature, which field allows you to specify the layer 7 protocol details to match?

AApplication ID

BSignature ID

CPattern Match

DProtocol Decoder

Answer : C

Question 6

Which of the following is NOT a benefit of using App-ID?

AIdentifies applications running on non-standard ports

BBlocks application traffic that uses dynamic ports

CReduces the attack surface by allowing only required applications

DEnsures consistent bandwidth allocation for all applications

Answer : D

Question 7

Which command would you use to view the current sessions on a Palo Alto firewall?

Ashow session all

Bshow session info

Cshow session list

Dshow session current

Answer : B

Palo Alto Networks PCNSC Palo Alto Networks Certified Network Security Consultant Exam Practice Test