Palo Alto Networks PCNSC Practice Questions & Answers

Question 6 of 59

Which are two commands required to upgrade Expedition? (Choose two.)

A.

sudo apt-get update

B.

sudo apt-get update expedition

C.

sudo apt-get upgrade all

D.

sudo apt-get install expedition-beta

Question 7 of 59

An existing customer who has deployed several Palo Alto Networks Next-Generation Firewalls would like to start using Device-ID to obtain policy rule recommendations. They have also purchased a Support license, a Threat license, a URL Filtering license, and a WildFire license for each firewall.

What additional license do they need to purchase?

A.

an IoT Security license for each deployed firewall

B.

a Cortex Data Lake license

C.

an IoT Security license for the perimeter firewall

D.

an Enterprise Data Loss Prevention (DLP) license

Question 8 of 59

Instead of disabling App-IDs regularly, a security policy rule is going to be configured to temporarily allow new App-IDs. In which two circumstances is it valid to disable App-IDs as part of content update? (Choose two.)

A.

when planning to enable the App-IDs immediately

B.

when you want to immediately benefit from the latest threat prevention

C.

when an organization operates a mission-critical network and has zero tolerance for downtime

D.

when disabling facebook-base to disable all other Facebook App-IDs

Question 9 of 59

DRAG DROP -

Identify the Stakeholder with their Role when planning a Firewall, Panorama, and Cortex XDR Deployment.

Question 10 of 59

DRAG DROP -

In Panorama, the web interface displays the security rules in evaluation order. Organize the security rules in the order in which they will be evaluated?