Palo Alto Networks PCNSE Exam Questions

Question 6 of 619

An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs. The administrator assigns priority 100 to the active firewall.
Which priority is correct for the passive firewall?

255

Correct Answer: D

In an active/passive high availability (HA) configuration for Palo Alto Networks Next-Generation Firewalls (NGFWs), the active firewall is given a lower numerical priority value to ensure it takes precedence. Given that the active firewall has a priority value of 100, the passive firewall must be assigned a higher numerical priority value to ensure it does not take over unless necessary. Therefore, the correct priority for the passive firewall should be a value greater than 100, making 255 the appropriate choice.

Question 7 of 619

An administrator pushes a new configuration from Panorama to a pair of firewalls that are configured as an active/passive HA pair.
Which NGFW receives the configuration from Panorama?

The passive firewall, which then synchronizes to the active firewall

The active firewall, which then synchronizes to the passive firewall

Both the active and passive firewalls, which then synchronize with each other

Both the active and passive firewalls independently, with no synchronization afterward

Correct Answer: D

When a configuration is pushed from Panorama to a pair of firewalls configured as an active/passive HA (High Availability) pair, both firewalls receive the configuration independently. The process does not involve synchronization between the two firewalls for Panorama-pushed configurations. Synchronization typically applies to local changes made on the firewalls themselves.

Question 8 of 619

An administrator cannot see any Traffic logs from the Palo Alto Networks NGFW in Panorama reports. The configuration problem seems to be on the firewall.
Which settings, if configured incorrectly, most likely would stop only Traffic logs from being sent from the firewall to Panorama?
A.
Exam PCNSE: Question 8 - Image 1

Correct Answer:

The correct answer is B. The provided image indicates that Log Forwarding is set to 'None,' which means that no logs, including Traffic logs, are being forwarded to Panorama. This setting affects the forwarding of logs from the firewall to Panorama, and an incorrect configuration here would result in no Traffic logs being sent. Inaccurate settings in the Log Forwarding profile will specifically impact which logs are forwarded, explaining why only Traffic logs might be missing.

Question 9 of 619

When configuring a GlobalProtect Portal, what is the purpose of specifying an Authentication Profile?

To enable Gateway authentication to the Portal

To enable Portal authentication to the Gateway

To enable user authentication to the Portal

To enable client machine authentication to the Portal

Correct Answer: C

The purpose of specifying an Authentication Profile in a GlobalProtect Portal configuration is to enable user authentication to the Portal. This ensures that users are properly authenticated before they can access the resources provided by the portal.

Question 10 of 619

If a template stack is assigned to a device and the stack includes three templates with overlapping settings, which settings are published to the device when the template stack is pushed?

The settings assigned to the template that is on top of the stack.

The administrator will be promoted to choose the settings for that chosen firewall.

All the settings configured in all templates.

Depending on the firewall location, Panorama decides with settings to send.

Correct Answer: A

When a template stack is assigned to a device and there are overlapping settings among the templates in the stack, the settings from the template at the top of the stack take precedence. Therefore, the settings assigned to the template that is on top of the stack are the ones that will be published to the device when the template stack is pushed.