Palo Alto Networks PCNSC - Palo Alto Networks Certified Network Security Consultant Exam
Page: 3 / 12
Total 59 questions
Question #11 (Topic: Exam A)
A customer’s Palo Alto Networks NGFW currently has only one security policy allowing all traffic. They have identified that this is a substantial security risk and have heard that the Expedition tool can help them extract security policies from an “allow any” rule.
What should the consultant say about Expedition?
What should the consultant say about Expedition?
A. Live firewall traffic can be viewed on Expedition when connected to a firewall, and Expedition can automatically create and push policies to the firewall.
B. The log flies can be viewed on Expedition, and right-clicking a log entry gives the option to create security policy from the log entry.
C. By using the Machine Learning feature, Expedition can parse the traffic log files related to the policy and extract security rules for matching traffic.
D. Expedition cannot parse log files and therefore cannot be used for this purpose.
Answer: C
Question #12 (Topic: Exam A)
In Expedition, which objects are classified as “Ghost objects”?
A. Address objects that are not part of an Address Group
B. Address objects that are not applied in Security or NAT policies
C. Unused address objects
D. Addresses imported from Security and NAT policies without corresponding address objects.
Answer: C
Question #13 (Topic: Exam A)
Which routing configuration should you recommend to a customer who wishes to actively use multiple pathways to the same destination?
A. RIPv2
B. BGP
C. EGMP
D. OSPF
Answer: B
Question #14 (Topic: Exam A)
In HA active/active configuration, which are three options for load sharing? (Choose three.)
A. Primary Device
B. IP Hash
C. Active Device
D. Source IP
E. IP Modulo
Answer: BDE
Question #15 (Topic: Exam A)
A URL is categorized as both health-and-medicine and abused-drugs. The health-and-medicine category is set to “allow” and the abused-drugs category is set to “block”.
Which two actions will be taken when this URL is visited? (Choose two.)
Which two actions will be taken when this URL is visited? (Choose two.)
A. block
B. log
C. allow
D. continue
Answer: AB
