Online Access Free PCNSE6 Practice Test

A company has purchased a WildFire subscription and would like to implement dynamic updates to download the most recent content as often as possible.
What is the shortest time interval the company can configure their firewall to check for WildFire updates?

• A.Every 5 minutes
• B.Every 24 hours
• C.Every 15 minutes
• D.Every 1 hour
• E.Every 30 minutes

What is a prerequisite for configuring a pair of Palo Alto Networks firewalls in an Active/Passive High Availability (HA) pair?

• A.The HA interfaces must be directly connected to each other.
• B.The management interfaces must be on the same network.
• C.The peer HA1 IP address must be the same on both firewalls.
• D.The firewalls must have the same set of licenses.

What can cause missing SSL packets when performing a packet capture on data plane interfaces?

• A.There is a hardware problem with the offloading FPGA on the management plane.
• B.The missing packets are offloaded to the management plane CPU.
• C.The packets are not captured because they are encrypted.
• D.The packets are hardware offloaded to the offload processor on the data plane.

What has happened when the traffic log shows an internal host attempting to open a session to a properly configured sinkhole address?

• A.A malicious domain is trying to contact an internal DNS server.
• B.The internal host attempted to use DNS to resolve a known malicious domain into an IP address.
• C.The internal host is trying to resolve a DNS query by connecting to a rogue DNS server.
• D.A rogue DNS server is now using the sinkhole address to direct traffic to a known malicious domain.

A user is reporting that they cannot download a PDF file from the internet.
Which action will show whether the downloaded file has been blocked by a Security Profile?

• A.Filter the Session Browser for all sessions from the user with the application "adobe".
• B.Filter the Data Filtering logs for the user's traffic and the name of the PDF file.
• C.Filter the Traffic logs for all traffic from the user that resulted in a Deny action.
• D.Filter the System log for "Download Failed" messages.