[Free] Download New Updated (April 2016) Palo Alto Networks PCNSE6 Actual Tests 1-10

Ensurepass

QUESTION 1

A security architect has been asked to implement User-ID in a MacOS environment with no enterprise email, using a Sun LDAP server for user authentication. In this environment, which two User-ID methods are effective for mapping users to IP addresses? Choose 2 answers

 

A.

Terminal Server Agent

B.

Mac OS Agent

C.

Captive Portal

D.

GlobalProtect

 

Correct Answer: CD

 

 

QUESTION 2

A website is presenting an RSA 2048-bit key. By default, what will the size of the key in the certificate sent by the firewall to the client be when doing SSL Decryption?

 

A.

512 bits

B.

1024 bits

C.

2048 bits

D.

4096 bits

 

Correct Answer: C

Explanation:

https://www.paloaltonetworks.com/documentation/61/pan-os/newfeaturesguide/management-features/configurable-key-size-for-ssl-forward-proxy-server-certificates.html

 

 

QUESTION 3

Administrative Alarms can be enabled for which of the following except?

 

A.

Certificate Expirations

B.

Security Violation Thresholds

C.

Security Policy Tags

D.

Traffic Log capacity

 

Correct Answer: A

 

 

QUESTION 4

Which of the following fields is not available in DoS policy?

 

A.

Destination Zone

B.

Source Zone

C.

Application

D.

Service

 

Correct Answer: C

 

 

 

 

 

 

QUESTION 5

HOTSPOT

Match the components with their role in preventing threats. Answer options may be used more than once or not at all.

 

clip_image002

 

Correct Answer:

clip_image004

 

 

 

 

QUESTION 6

A company has purchased a WildFire subscription and would like to implement dynamic updates to download the most recent content as often as possible. What is the shortest time interval the company can configure their firewall to check for WildFire updates?

 

A.

Every 24 hours

B.

Every 30 minutes

C.

Every 15 minutes

D.

Every 1 hour

E.

Every 5 minutes

 

Correct Answer: C

Explanation:

https://www.paloaltonetworks.com/content/dam/paloaltonetworks-com/en_US/assets/pdf/framemaker/60/wildfire/WF_Admin/section_1.pdf page11

 

 

QUESTION 7

In PAN-OS 5.0, how is Wildfire enabled?

 

A.

Via the “Forward” and “Continue and Forward” File-Blocking actions

B.

A custom file blocking action must be enabled for all PDF and PE type files

C.

Wildfire is automatically enabled with a valid URL-Filtering license

D.

Via the URL-Filtering “Continue” Action.

 

Correct Answer: A

 

 

QUESTION 8

WildFire Analysis Reports are available for the following Operating Systems (select all that apply)

 

A.

Windows XP

B.

< font style="font-size: 10pt" color="#000000">Windows 7

C.

Windows 8

D.

Mac OS-X

 

Correct Answer: ABC

 

 

QUESTION 9

Which method is the most efficient for determining which administrator made a specific change to the running config?

 

A.

In the Configuration log, set a filter for the edit command and look for the object that was changed.

B.

In the System log, set a filter for the name of the object that was changed.

C.

In Config Audit, compare the current running config to all of the saved configurations until the change is found.

D.

In Config Audit, compare the current running config to previous committed versions until the change is found.

 

Correct Answer: B

 

 

QUESTION 10

Which option allows an administrator to segrate Panorama and Syslog traffic, so that the Management Interface is not employed when sending these types of traffic?

 

A.

Custom entries in the Virtual Router, pointing to the IP addresses of the Panorama and Syslog devices.

B.

Define a Loopback interface for the Panorama and Syslog Devices

C.

On the Device tab in the Web UI, create custom server profiles for Syslog and Panorama

D.

Service Route Configuration

 

Correct Answer: D

 

Free VCE & PDF File for Palo Alto Networks PCNSE6 Real Exam

Instant Access to Free VCE Files: CompTIA | VMware | SAP …
Instant Access to Free PDF Files: CompTIA | VMware | SAP …