Free PCNSE7 Questions for Palo Alto Networks Certified Network Security Engineer PCNSE7 Exam as PDF & Practice Test Engine
A Network Administrator wants to deploy a Large Scale VPN solution.
The Network Administrator has chosen a GlobalProtect Satellite solution.
This configuration needs to be deployed to multiple remote offices and the Network Administrator decides to use Panorama to deploy the configurations.
How should this be accomplished?
The Network Administrator has chosen a GlobalProtect Satellite solution.
This configuration needs to be deployed to multiple remote offices and the Network Administrator decides to use Panorama to deploy the configurations.
How should this be accomplished?
Correct Answer: C
Vote an answer
An administrator needs to determine why users on the trust zone cannot reach certain websites. The only information available is shown on the following image. Which configuration change should the administrator make? A)

B)

C)

D)

E)


B)

C)

D)

E)

Correct Answer: A
Vote an answer
A network security engineer is asked to perform a Return Merchandise Authorization (RMA) on a firewall Which part of files needs to be imported back into the replacement firewall that is using Panorama?
Correct Answer: D
Vote an answer
An Administrator is configuring an IPSec VPN toa Cisco ASA at the administrator's home and experiencing issues completing the connection. The following is th output from the command:
less mp-log ikemgr.log:

What could be the cause of this problem?
less mp-log ikemgr.log:

What could be the cause of this problem?
Correct Answer: B
Vote an answer
The IT department has received complaints abou VoIP call jitter when the sales staff is making or receiving calls. QoS is enabled on all firewall interfaces, but there is no QoS policy written in the rulebase. The IT manager wants to find out what traffic is causing the jitter in real time when a user reports the jitter.
Which feature can be used to identify, in real time, the applications taking up the most bandwidth?
Which feature can be used to identify, in real time, the applications taking up the most bandwidth?
Correct Answer: A
Vote an answer
A network security engineer has been asked to analyze Wildfire activity. However, the Wildfire Submissions item is not visible form the Monitor tab.
What could cause this condition?
What could cause this condition?
Correct Answer: C
Vote an answer
A firewall administrator is troubleshooting problems with traffic passing through the Palo Alto Networks firewall. Which method shows the global counters associated with the traffic after configuring the appropriate packet filters?
Correct Answer: D
Vote an answer
Which URL Filtering Security Profile action logs the URL Filtering category to the URL Filtering log?
Correct Answer: A
Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
A host attached to Ethernet 1/4 cannot ping the default gateway. The widget on the dashboard shows Ethernet 1/1 and Ethernet 1/4 to be green. The IP address of Ethernet
1/1 is 192.168.1.7 and the IP address of Ethernet 1/4 is 10.1.1.7. The default gateway is attached to Ethernet 1/1. A default route is properly configured.
What can be the cause of this problem?
1/1 is 192.168.1.7 and the IP address of Ethernet 1/4 is 10.1.1.7. The default gateway is attached to Ethernet 1/1. A default route is properly configured.
What can be the cause of this problem?
Correct Answer: B
Vote an answer
What are three possible verdicts that WildFire can provide for an analyzed sample? (Choose three)
Correct Answer: C,D,E
Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
A session in the Traffic log is reporting the application as "incomplete." What does "incomplete" mean?
Correct Answer: D
Vote an answer
How are IPV6 DNS queries configured to user interface ethernet1/3?
Correct Answer: B
Vote an answer
0
0
0
10

