PCNSE Free Practice Test

How would an administrator configure a Bidirectional Forwarding Detection profile for BGP after enabling the Advance Routing Engine run on PAN-OS 10.2?

1. A. create a BFD profile under Network > Network Profiles > BFD Profile and then select the BFD profile under Network > Virtual Router > BGP > BFD
2. B. create a BFD profile under Network > Routing > Routing Profiles > BFD and then select the BFD profile under Network > Virtual Router > BGP > General > Global BFD Profile
3. C. create a BFD profile under Network > Routing > Routing Profiles > BFD and then select the BFD profile under Network > Routing > Logical Routers > BGP > General > Global BFD Profile
4. D. create a BFD profile under Network > Network Profiles > BFD Profile and then select the BFD profile under Network > Routing > Logical Routers > BGP > BFD

Correct Answer: B

An administrator needs to evaluate a recent policy change that was committed and pushed to a firewall device group.
How should the administrator identify the configuration changes?

1. A. review the configuration logs on the Monitor tab
2. B. click Preview Changes under Push Scope
3. C. use Test Policy Match to review the policies in Panorama
4. D. context-switch to the affected firewall and use the configuration audit tool

Correct Answer: A
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/panorama-web-interface/panorama-co

Which statement is correct given the following message from the PanGPA log on the GlobalProtect app? Failed to connect to server at port:47 67

1. A. The PanGPS process failed to connect to the PanGPA process on port 4767
2. B. The GlobalProtect app failed to connect to the GlobalProtect Portal on port 4767
3. C. The PanGPA process failed to connect to the PanGPS process on port 4767
4. D. The GlobalProtect app failed to connect to the GlobalProtect Gateway on port 4767

Correct Answer: D

An engineer has been tasked with reviewing traffic logs to find applications the firewall is unable to identify with App-ID. Why would the application field display as incomplete?

1. A. The client sent a TCP segment with the PUSH flag set.
2. B. The TCP connection was terminated without identifying any application data.
3. C. There is insufficient application data after the TCP connection was established.
4. D. The TCP connection did not fully establish.

Correct Answer: C

A network-security engineer attempted to configure a bootstrap package on Microsoft Azure, but the virtual machine provisioning process failed. In reviewing the bootstrap package, the engineer only had the following directories: /config, /license and /software
Why did the bootstrap process fail for the VM-Series firewall in Azure?

1. A. All public cloud deployments require the /plugins folder to support proper firewall native integrations
2. B. The /content folder is missing from the bootstrap package
3. C. The VM-Series firewall was not pre-registered in Panorama and prevented the bootstrap process from successfully completing
4. D. The /config or /software folders were missing mandatory files to successfully bootstrap

Correct Answer: B