Free Access PaloAltoNetworks.PCNSE.v2022-05-14.q137 Practice Test (Page 16)

Question 71

A file sharing application is being permitted and no one knows what this application is used for.
How should this application be blocked?

A.Block all unauthorized applications using a security policy

B.Create a File blocking profile that blocks Layer 4 and Layer 7 attacks

C.Create a WildFire Analysis Profile that blocks Layer 4 and Layer 7 attacks

D.Block all known internal custom applications

Question 72

The firewall is not downloading IP addresses from MineMeld. Based, on the image, what most likely is wrong?

A.A Certificate Profile that contains the CA certificate needs to be selected.

B.A Certificate Profile that contains the client certificate needs to be selected.

C.External Dynamic Lists do not support SSL connections.

D.The source address supports only files hosted with an ftp://<address/file>.

Question 73

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.
How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?

A.Add a DoS Protection Profile with defined session count.

B.Define a custom App-ID to ensure that only legitimate application traffic reaches the server.

C.Add QoS Profiles to throttle incoming requests.

D.Add a Vulnerability Protection Profile to block the attack.

Question 74

Which two virtualized environments support Active/Active High Availability (HA) in PAN-OS 8.0? (Choose two.)

A.VMware ESX

B.AWS

C.KVM

D.VMware NSX

Question 75

An administrator is defining protection settings on the Palo Alto Networks NGFW to guard against resource exhaustion. When platform utilization is considered, which steps must the administrator take to configure and apply packet buffer protection?

A.Create and Apply Zone Protection Profiles in all ingress zones.Enable Packet Buffer Protection per ingress zone.

B.Enable and configure the Packet Buffer protection thresholds.Enable Packet Buffer Protection per ingress zone.

C.Enable and then configure Packet Buffer thresholdsEnable Interface Buffer protection.

D.Configure and apply Zone Protection Profiles for all egress zones.Enable Packet Buffer Protection pre egress zone.

E.Enable per-vsys Session Threshold alerts and triggers for Packet Buffer Limits.Enable Zone Buffer Protection per zone.

Other Version: 5505PaloAltoNetworks.PCNSE.v2025-03-18.q258; 4270PaloAltoNetworks.PCNSE.v2024-11-12.q234; 2338PaloAltoNetworks.PCNSE.v2024-05-11.q101; 2818PaloAltoNetworks.PCNSE.v2023-10-12.q86; 4242PaloAltoNetworks.PCNSE.v2023-09-11.q127; 2239PaloAltoNetworks.PCNSE.v2023-03-22.q54; 2682PaloAltoNetworks.PCNSE.v2023-03-21.q68; 2464PaloAltoNetworks.PCNSE.v2023-02-23.q56; 8108PaloAltoNetworks.PCNSE.v2022-07-29.q254; 5294PaloAltoNetworks.PCNSE.v2022-03-30.q139; 62Palo-Alto-Networks.Exams4sures.PCNSE.v2021-09-24.by.sebastian.300q.pdf

Latest Upload: 240PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 332Nokia.4A0-113.v2026-05-01.q69; 338EC-COUNCIL.312-49v11.v2026-04-30.q214; 271Microsoft.MB-820.v2026-04-30.q101; 236Salesforce.MC-202.v2026-04-30.q57; 249BICSI.INSTC_V8.v2026-04-29.q53; 368NMLS.MLO.v2026-04-28.q82; 267NCARB.Project-Management.v2026-04-28.q27; 484EMC.D-AV-DY-23.v2026-04-27.q184; 1236ServiceNow.CSA.v2026-04-27.q483

Question 71

Question 72

Question 73

Question 74

Question 75

Download PDF File