PCNSE Certification Exam Questions with AI Explanations

QUESTION: 86

Which two options prevent the firewall from capturing traffic passing through it? (Choose two.)

The firewall is in multi-vsys mode.
The traffic is offloaded.
The traffic does not match the packet capture filter.
The firewall’s DP CPU is higher than 50%.

Answer(s): B,C

Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/monitoring/take-packet-captures/disable-hardware-offload

Reveal Solution Next Question

QUESTION: 87

A global corporate office has a large-scale network with only one User-ID agent, which creates a bottleneck near the User-ID agent server.

Which solution in PAN-OS® software would help in this case?

application override
Virtual Wire mode
content inspection
redistribution of user mappings

Answer(s): D

Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/deploy-user-id-in-a-large-scale-network

Reveal Solution Next Question

An administrator has been asked to create 100 virtual firewalls in a local, on-premise lab environment (not in “the cloud”). Bootstrapping is the most expedient way to perform this task.

Which option describes deployment of a bootstrap package in an on-premise virtual environment?

Use config-drive on a USB stick.
Use an S3 bucket with an ISO.
Create and attach a virtual hard disk (VHD).
Use a virtual CD-ROM with an ISO.

Answer(s): D

Reference:

https://www.paloaltonetworks.com/documentation/80/virtualization/virtualization/set-up-the-vm-series-firewall-on-kvm/install-the-vm-series-firewall-on-kvm/use-an-iso-file-to-deploy-the-vm-series-firewall

Reveal Solution Next Question