Practice PCNSE Exam Online

Question 1

An administrator has been tasked with deploying SSL Forward Proxy.Which two types of certificates are used to decrypt the traffic? (Choose two.)

A : Device certificate

B : Subordinate CA from the administrator’s own PKI infrastructure

C : Self-signed root CA

D : External CA certificate

Answer: B,D

Question 2

Which function is handled by the management plane (control plane) of a Palo Alto Networks firewall?

A : logging

B : signature matching for content inspection

C : Quality of Service

D : IPSec tunnel standup

Answer: A

Question 3

What can you use with Global Protect to assign user-specific client certificates to each GlobalProtect user?

A : SSL/TLS Service profile

B : Certificate profile

C : SCEP

D : OCSP Responder

Answer: C

Question 4

In High Availability, which information is transferred via the HA data link?

A : session information

B : heartbeats

C : HA state information

D : User-ID information

Answer: A

Question 5

Your company wants greater visibility into their traffic and has asked you to start planning an SSL Decryption project. The company does not have a PKI infrastructure, and multiple certificates would be needed for this project. Which type of certificate can you use to generate other certificates?

A : self-signed root CA

B : external CA certificate

C : server certificate

D : device certificate

Answer: A

Name:	Palo Alto Networks Certified Network Security Engineer PAN-OS 11.0 Version
Exam Code:	PCNSE
Certification:	Palo Alto Networks Certified Network Security Engineer
Vendor:	Palo Alto Networks
Total Questions:	639
Last Updated:	Apr 24, 2024

Palo Alto Networks PCNSE