Palo Alto Networks

Palo Alto Networks PCNSE Exam (page: 10)
Palo Alto Networks Certified Network Security Engineer
Updated on: 02-Mar-2026

Viewing Page 10 of 123 Pages

PCNSE PDF with 606 Questions

QUESTION: 46

Which three authentication services can an administrator use to authenticate admins into the Palo Alto Networks NGFW without defining a corresponding admin account on the local firewall? (Choose three.)

Kerberos
PAP
SAML
TACACS+
RADIUS
LDAP

Answer(s): C,D,E

Reveal Solution Next Question

QUESTION: 47

Which event will happen if an administrator uses an Application Override Policy?

Threat-ID processing time is decreased.
The Palo Alto Networks NGFW stops App-ID processing at Layer 4.
The application name assigned to the traffic by the security rule is written to the Traffic log.
App-ID processing time is increased.

Answer(s): B

Reference:

https://live.paloaltonetworks.com/t5/Learning-Articles/Tips-amp-Tricks-How-to-Create-an-Application-Override/ta-p/65513

Reveal Solution Next Question

QUESTION: 48

Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?

Deny application facebook-chat before allowing application facebook
Deny application facebook on top
Allow application facebook on top
Allow application facebook before denying application facebook-chat

Answer(s): A

Reference:

https://live.paloaltonetworks.com/t5/Configuration-Articles/Failed-to-Block-Facebook-Chat-Consistently/ta-p/115673

Reveal Solution Next Question

QUESTION: 49

A client is concerned about resource exhaustion because of denial-of-service attacks against their DNS servers.Which option will protect the individual servers?

Enable packet buffer protection on the Zone Protection Profile.
Apply an Anti-Spyware Profile with DNS sinkholing.
Use the DNS App-ID with application-default.
Apply a classified DoS Protection Profile.

Answer(s): D

Reveal Solution Next Question

QUESTION: 50

If the firewall is configured for credential phishing prevention using the “Domain Credential Filter” method, which login will be detected as credential theft?

Mapping to the IP address of the logged-in user.
First four letters of the username matching any valid corporate username.
Using the same user’s corporate username and password.
Matching any valid corporate username.

Answer(s): C

Reveal Solution Next Question

Viewing Page 10 of 123 Pages

Share your comments for Palo Alto Networks PCNSE exam with other users:

Comments:

Name:

Daisy Delgado 1/9/2023 1:05:00 PM

awesome

UNITED STATES

Atif 6/13/2023 4:09:00 AM

yes please upload

UNITED STATES

Xunil 6/12/2023 3:04:00 PM

great job whoever put this together, for the greater good! thanks!

Anonymous

Lakshmi 10/2/2023 5:26:00 AM

just started to view all questions for the exam

NETHERLANDS

rani 1/19/2024 11:52:00 AM

helpful material

Anonymous

Greg 11/16/2023 6:59:00 AM

hope for the best

UNITED STATES

hi 10/5/2023 4:00:00 AM

will post exam has finished

UNITED STATES

Vmotu 8/24/2023 11:14:00 AM

really correct and good analyze!

AZERBAIJAN

hicham 5/30/2023 8:57:00 AM

excellent thanks a lot

FRANCE

Suman C 7/7/2023 8:13:00 AM

will post once pass the cka exam

INDIA

Ram 11/3/2023 5:10:00 AM

good content

Anonymous

Nagendra Pedipina 7/13/2023 2:12:00 AM

q:32 answer has to be option c

INDIA

Tamer Barakat 12/7/2023 5:17:00 PM

nice questions

Anonymous

Daryl 8/1/2022 11:33:00 PM

i really like the support team in this website. they are fast in communication and very helpful.

UNITED KINGDOM

Curtis Nakawaki 6/29/2023 9:13:00 PM

a good contemporary exam review

UNITED STATES

x-men 5/23/2023 1:02:00 AM

q23, its an array, isnt it? starts with [ and end with ]. its an array of objects, not object.

UNITED STATES

abuti 7/21/2023 6:24:00 PM

cool very helpfull

Anonymous

Krishneel 3/17/2023 10:34:00 AM

i just passed. this exam dumps is the same one from prepaway and examcollection. it has all the real test questions.

INDIA

Regor 12/4/2023 2:01:00 PM

is this a valid prince2 practitioner dumps?

UNITED KINGDOM

asl 9/14/2023 3:59:00 PM

all are relatable questions

CANADA

Siyya 1/19/2024 8:30:00 PM

might help me to prepare for the exam

Anonymous

Ted 6/21/2023 11:11:00 PM

just paid and downlaod the 2 exams using the 50% sale discount. so far i was able to download the pdf and the test engine. all looks good.

GERMANY

Paul K 11/27/2023 2:28:00 AM

i think it should be a,c. option d goes against the principle of building anything custom unless there are no work arounds available

INDIA

ph 6/16/2023 12:41:00 AM

very legible

Anonymous

sephs2001 7/31/2023 10:42:00 PM

is this exam accurate or helpful?

Anonymous

ash 7/11/2023 3:00:00 AM

please upload dump, i have exam in 2 days

INDIA

Sneha 8/17/2023 6:29:00 PM

this is useful

CANADA

sachin 12/27/2023 2:45:00 PM

question 232 answer should be perimeter not netowrk layer. wrong answer selected

Anonymous

tomAws 7/18/2023 5:05:00 AM

nice questions

BRAZIL

Rahul 6/11/2023 2:07:00 AM

hi team, could you please provide this dump ?

INDIA

TeamOraTech 12/5/2023 9:49:00 AM

very helpful to clear the exam and understand the concept.

Anonymous

Curtis 7/12/2023 8:20:00 PM

i think it is great that you are helping people when they need it. thanks.

UNITED STATES

sam 7/17/2023 6:22:00 PM

cannot evaluate yet

Anonymous

nutz 7/20/2023 1:54:00 AM

a laptops wireless antenna is most likely located in the bezel of the lid

UNITED STATES