PCNSE Exam Questions and Answers | Exam-Dumps (Page: 20)

QUESTION: 96

Which two methods can be used to verify firewall connectivity to AutoFocus? (Choose two.)

Verify AutoFocus status using the CLI “test” command.
Check the WebUI Dashboard AutoFocus widget.
Check for WildFire forwarding logs.
Check the license.
Verify AutoFocus is enabled below Device Management tab.

Answer(s): D,E

Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/getting-started/enable-autofocus-threat-intelligence

Reveal Solution Next Question

QUESTION: 97

Which CLI command enables an administrator to check the CPU utilization of the dataplane?

show running resource-monitor
debug data-plane dp-cpu
show system resources
debug running resources

Answer(s): A

Reveal Solution Next Question

QUESTION: 98

Which DoS protection mechanism detects and prevents session exhaustion attacks?

Packet Based Attack Protection
Flood Protection
Resource Protection
TCP Port Scan Protection

Answer(s): C

Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules/dos-protection-profiles

Reveal Solution Next Question

QUESTION: 99

Which two subscriptions are available when configuring Panorama to push dynamic updates to connected devices? (Choose two.)

Content-ID
User-ID
Applications and Threats
Antivirus

Answer(s): C,D

Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/device/device-dynamic-updates

Reveal Solution Next Question

QUESTION: 100

View the GlobalProtect configuration screen capture. What is the purpose of this configuration?

It configures the tunnel address of all internal clients to an IP address range starting at 192.168.10.1.
It forces an internal client to connect to an internal gateway at IP address 192.168.10.1.
It enables a client to perform a reverse DNS lookup on 192.168.10.1 to detect that it is an internal client.
It forces the firewall to perform a dynamic DNS update, which adds the internal gateway’s hostname and IP address to the DNS server.

Answer(s): C

Reference:

https://www.paloaltonetworks.com/documentation/80/globalprotect/globalprotect-admin-guide/ globalprotect-portals/define-the-globalprotect-client-authentication-configurations/define-the-globalprotect-agent-configurations

Reveal Solution Next Question

Palo Alto Networks PCNSE Exam (page: 20) Palo Alto Networks Certified Network Security Engineer Updated on: 12-Jan-2026

QUESTION: 96

Reference:

QUESTION: 97

QUESTION: 98

Reference:

QUESTION: 99

Reference:

QUESTION: 100

Reference:

Palo Alto Networks PCNSE Exam (page: 20)
Palo Alto Networks Certified Network Security Engineer
Updated on: 12-Jan-2026