PCNSE Exam Questions and Answers | Exam-Dumps (Page: 18)

QUESTION: 86

Which two options prevent the firewall from capturing traffic passing through it? (Choose two.)

The firewall is in multi-vsys mode.
The traffic is offloaded.
The traffic does not match the packet capture filter.
The firewall’s DP CPU is higher than 50%.

Answer(s): B,C

Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/monitoring/take-packet-captures/disable-hardware-offload

Reveal Solution Next Question

QUESTION: 87

A global corporate office has a large-scale network with only one User-ID agent, which creates a bottleneck near the User-ID agent server.

Which solution in PAN-OS® software would help in this case?

application override
Virtual Wire mode
content inspection
redistribution of user mappings

Answer(s): D

Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/deploy-user-id-in-a-large-scale-network

Reveal Solution Next Question

An administrator has been asked to create 100 virtual firewalls in a local, on-premise lab environment (not in “the cloud”). Bootstrapping is the most expedient way to perform this task.

Which option describes deployment of a bootstrap package in an on-premise virtual environment?

Use config-drive on a USB stick.
Use an S3 bucket with an ISO.
Create and attach a virtual hard disk (VHD).
Use a virtual CD-ROM with an ISO.

Answer(s): D

Reference:

https://www.paloaltonetworks.com/documentation/80/virtualization/virtualization/set-up-the-vm-series-firewall-on-kvm/install-the-vm-series-firewall-on-kvm/use-an-iso-file-to-deploy-the-vm-series-firewall

Reveal Solution Next Question

QUESTION: 89

Which two benefits come from assigning a Decryption Profile to a Decryption policy rule with a “No Decrypt” action? (Choose two.)

Block sessions with expired certificates
Block sessions with client authentication
Block sessions with unsupported cipher suites
Block sessions with untrusted issuers
Block credential phishing

Answer(s): A,D

Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/decryption/define-traffic-to-decrypt/create-a-decryption-profile

Reveal Solution Next Question

QUESTION: 90

Which User-ID method should be configured to map IP addresses to usernames for users connected through a terminal server?

port mapping
server monitoring
client probing
XFF headers

Answer(s): A

Reference:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/configure-user-mapping-for-terminal-server-users

Reveal Solution Next Question

Palo Alto Networks PCNSE Exam (page: 18)
Palo Alto Networks Certified Network Security Engineer
Updated on: 12-Jan-2026

QUESTION: 86

Reference:

QUESTION: 87

Reference:

QUESTION: 88

Reference:

QUESTION: 89

Reference:

QUESTION: 90

Reference:

Palo Alto Networks PCNSE Exam (page: 18) Palo Alto Networks Certified Network Security Engineer Updated on: 12-Jan-2026

QUESTION: 86

Reference:

QUESTION: 87

Reference:

QUESTION: 88

Reference:

QUESTION: 89

Reference:

QUESTION: 90

Reference:

Palo Alto Networks PCNSE Exam (page: 18)
Palo Alto Networks Certified Network Security Engineer
Updated on: 12-Jan-2026