[Free] Download New Updated (April 2016) Palo Alto Networks PCNSE6 Actual Tests 61-70

Ensurepass

QUESTION 61

When a user logs in via Captive Portal, their user information can be checked against:

 

A.

Terminal Server Agent

B.

Security Logs

C.

XML API

D.

Radius

 

Correct Answer: D

 

 

QUESTION 62

HOTSPOT

Match the description of an application field with its name. Answer options may be used more than once or not at all.

 

clip_image002

 

Correct Answer:

clip_image004

 

 

 

 

 

QUESTION 63

When using Config Audit, the color yellow indicates which of the following?

 

A.

A setting has been changed between the two config files

B.

A setting has been deleted from a config file.

C.

A setting has been added to a config file

D.

An invalid value has been used in a config file.

 

Correct Answer: C

 

 

QUESTION 64

A user is reporting that they cannot download a PDF file from the internet. Which action will show whether the downloaded file has been blocked by a Security Profile?

 

A.

Filter the Session Browser for all sessions from the user with the application “adobe”.

B.

Filter the System log for “Download Failed” messages.

C.

Filter the Traffic logs for all traffic from the user that resulted in a Deny action.

D.

Filter the Data Filtering logs for the user’s traffic and the name of the PDF file.

 

Correct Answer: D

 

 

QUESTION 65

Which one of the options describes the sequence of the GlobalProtect agent connecting to a Gateway?

 

A.

The agent connects to the portal, obtains a list of the Gateways, and connects to the Gateway with the fastest SSL connect time

B.

The agent connects to the portal and randomly establishes connect to the first available Gateway

C.

The agent co
nnects to the portal, obtains a list of the Gateways, and connects to the Gateway with the fastest PING response time

D.

The agent connects to the closest Gateway and sends the HIP report to the portal

 

Correct Answer: C

 

 

QUESTION 66

What is the correct policy to most effectively block Skype?

 

A.

Allow Skype, block Skype-probe

B.

Allow Skype-probe, block Skype

C.

Block Skype-probe, block Skype

D
.

Block Skype

 

Correct Answer: A

 

 

QUESTION 67

In an Anti-Virus profile, changing the action to “Block” for IMAP or POP decoders will result in the following:

 

A.

The connection from the server will be reset

B.

The Anti-virus profile will behave as if “Alert” had been specified for the action

C.

The traffic will be dropped by the firewall

D.

Error 541 being sent back to the server

 

Correct Answer: B

 

 

QUESTION 68

Can multiple administrator accounts be configured on a single firewall?

 

A.

Yes

B.

No

 

Correct Answer: A

 

 

QUESTION 69

Which two steps are required to make Microsoft Active Directory users appear in the firewall’s traffic log? Choose 2 answers

 

A.

Enable User-ID on the zone object for the source zone.

B.

Enable User-ID on the zone object for the destination zone.

C.

Configure a RADIUS server profile to point to a domain controller.

D.

Run the User-ID Agent using an Active Directory account that has “domain administrator” permissions.

E.

Run the User-ID Agent using an Active Directory account that has “event log viewer” permissions.

 

Correct Answer: AE

 

 

QUESTION 70

As the Palo Alto Networks administrator, you have enabled Application Block pages. Afterward, some users do not receive web-based feedback for all denied applications. Why would this be?

 

A.

Some users are accessing the Palo Alto Networks firewall through a virtual system that does not have Application Block pages enabled.

B.

Application Block Pages will only be displayed when Captive Portal is configured

C.

Some Application ID’s are set with a Session Timeout value that is too low.

D.

Application Block Pages will only be displayed when users attempt to access a denied web-based application.

 

Correct Answer: D

 

Free VCE & PDF File for Palo Alto Networks PCNSE6 Real Exam

Instant Access to Free VCE Files: CompTIA | VMware | SAP …
Instant Access to Free PDF Files: CompTIA | VMware | SAP …