Online Access Free PCNSC Practice Test

In an HA (High Availability) setup, what is the purpose of the HA3 link?

• A.Exchange heartbeats between the devices
• B.Synchronize configuration changes
• C.Transmit HA control traffic
• D.Synchronize session state information

A customer is adding a new site-to-site tunnel from a PaloAlto Networks NGFW to a third party with a policy based VPN peer After the initial configuration is completed and the changes are committed, phase 2 fails to establish Which two changes may be required to fix the issue? (Choose two)

• A.Verify that PFS is enabled on both ends
• B.Enable the NAT Traversal advanced option.
• C.Add proxy IDs to the iPsec tunnel configuration
• D.Verity that the certificate used tor authentication is installed.

Which GlobalProtect feature ensures that only trusted endpoints can connect to the network?

• A.App-ID
• B.SSL Decryption
• C.User-ID
• D.Host Information Profile (HIP)

A customer has a five-year-old firewall in production in the time since the firewall was installed, the IT team deleted unused security policies on a regular basis but they did not remove the address objects and groups that were part ofthese security policies.
What is the best way to delete all of the unused address objects on the firewall?

• A.Using CLI execute requestconfiguration address-objectsremove-unused-objects.
• B.Go to Address Objects under the Objects tab and click on Remove unused objects.
• C.Import the configuration in Expedition, remove unused address objects, and reimport the configuration.
• D.Search each address object with Global Find and delete if it shows that the address object is not referenced.

Which of the following is a primary use case for the Decryption Broker feature?

• A.Managing multiple decryption rules
• B.Aggregating traffic logs from different sources
• C.Decrypting outbound SSL traffic
• D.Sharing decrypted traffic with multiple security appliances