Certified Network Security Engineer Exam Questions PDF download

QUESTION: 61

Which CLI command can be used to export the tcpdump capture?

scp export tcpdump from mgmt.pcap to <username@host:path>
scp extract mgmt-pcap from mgmt.pcap to <username@host:path>
scp export mgmt-pcap from mgmt.pcap to <username@host:path>
downloadmgmt-pcap

Answer(s): C

Reference:

https://live.paloaltonetworks.com/t5/Management-Articles/How-To-Packet-Capture-tcpdump-On-Management-Interface/ta-p/55415

Reveal Solution Next Question

An administrator has configured the Palo Alto Networks NGFW’s management interface to connect to the internet through a dedicated path that does not traverse back through the NGFW itself.

Which configuration setting or step will allow the firewall to get automatic application signature updates?

A scheduler will need to be configured for application signatures.
A Security policy rule will need to be configured to allow the update requests from the firewall to the update servers.
A Threat Prevention license will need to be installed.
A service route will need to be configured.

Answer(s): A

Reveal Solution Next Question