Free Access PaloAltoNetworks.PCNSE.v2023-03-21.q68 Practice Test (Page 4)

Question 11

What is a correct statement regarding administrative authentication using external services with a local authorization method?

A.Starting with PAN-OS 10.2. an administrator needs to configure Cloud Identity Engine to use external authentication services for administrative authentication.

B.The administrative accounts you define locally on the firewall serve as references to the accounts defined on an external authentication server.

C.Prior to PAN-OS 10.2. an administrator used the firewall to manage role assignments, but access domains have not been supported by this method.

D.The administrative accounts you define on an external authentication server serve as references to the accounts defined locally on the firewall.

Question 12

Refer to the image.

An administrator is tasked with correcting an NTP service configuration for firewalls that cannot use the Global template NTP servers. The administrator needs to change the IP address to a preferable server for this template stack but cannot impact other template stacks.
How can the issue be corrected?

A.Override the value on the NYCFW template.

B.Override a template value using a template stack variable.

C.Override the value on the Global template.

D.Enable "objects defined in ancestors will take higher precedence" under Panorama settings.

Question 13

Cortex XDR notifies an administrator about grayware on the endpoints. There are no entries about grayware in any of the logs of the corresponding firewall. Which setting can the administrator configure on the firewall to log grayware verdicts?

A.within the log forwarding profile attached to the Security policy rule

B.in Threat General Settings, select "Report Grayware Files"

C.in WildFire General Settings, select "Report Grayware Files"

D.within the log settings option in the Device tab

Question 14

Which three items are import considerations during SD-WAN configuration planning? (Choose three.)

A.link requirements

B.the name of the ISP

C.IP Addresses

D.branch and hub locations

Question 15

What is considered the best practice with regards to zone protection?

A.Review DoS threat activity (ACC > Block Activity) and look for patterns of abuse

B.If the levels of zone and DoS protection consume too many firewall resources, disable zone protection

C.Set the Alarm Rate threshold for event-log messages to high severity or critical severity

D.Use separate log-forwarding profiles to forward DoS and zone threshold event logs separately from other threat logs

Other Version: 2601PaloAltoNetworks.PCNSE.v2025-03-18.q258; 2087PaloAltoNetworks.PCNSE.v2024-11-12.q234; 1214PaloAltoNetworks.PCNSE.v2024-05-11.q101; 1677PaloAltoNetworks.PCNSE.v2023-10-12.q86; 2548PaloAltoNetworks.PCNSE.v2023-09-11.q127; 1627PaloAltoNetworks.PCNSE.v2023-03-22.q54; 1623PaloAltoNetworks.PCNSE.v2023-02-23.q56; 6164PaloAltoNetworks.PCNSE.v2022-07-29.q254; 3888PaloAltoNetworks.PCNSE.v2022-05-14.q137; 4013PaloAltoNetworks.PCNSE.v2022-03-30.q139; 62Palo-Alto-Networks.Exams4sures.PCNSE.v2021-09-24.by.sebastian.300q.pdf

Latest Upload: 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 162TheSecOpsGroup.CNSP.v2025-09-08.q20; 220CFAInstitute.ESG-Investing.v2025-09-08.q173; 155PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 145Salesforce.Data-Architect.v2025-09-05.q216; 139Adobe.AD0-E605.v2025-09-05.q50; 183Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 11

Question 12

Question 13

Question 14

Question 15

Download PDF File