[Free] 2019(Nov) EnsurePass Palo Alto Networks PCNSE Dumps with VCE and PDF 131-140

Get Full Version of the Exam

Question No.131

Which two settings can be configured only locally on the firewall and not pushed from a Panorama template or template stack? (Choose two)

  1. HA1 IP Address

  2. Network Interface Type

  3. Master Key

  4. Zone Protection Profile

Correct Answer: AB

Question No.132

A customer wants to set up a site-to-site VPN using tunnel interfaces. Which twoformats are correct for naming tunnel interfaces? (Choose two.)

  1. Vpn-tunnel.1024

  2. vpn-tunne.1

  3. tunnel 1025

  4. tunnel. 1

Correct Answer: CD

Question No.133

Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)

  1. Content-ID

  2. User-ID

  3. Applications and Threats

  4. Antivirus

Correct Answer: CD


https://www.paloaltonetworks.com/documentation/71/pan-os/web-interface-help/device/device- dynamic-updates

Question No.134

When configuring a GlobalProtect Portal, what is the purpose of specifying an Authentication Profile?

  1. To enable Gatewayauthentication to the Portal

  2. To enable Portal authentication to the Gateway

  3. To enable user authentication to the Portal

  4. To enable client machine authentication to the Portal

Correct Answer: C


The additional options of Browser and Satelliteenable you to specify the authentication profile to use for specific scenarios. Select Browser to specify the authentication profile to use to authenticate a user accessing the portal from a web browser with the intent of downloading the GlobalProtect agent (Windows and Mac). Select Satellite to specify the authentication profile to use to authenticate the satellite.

https://www.paloaltonetworks.com/documentation/71/pan-os/web-interface- help/globalprotect/network-globalprotect-portals

Question No.135

Which three authentication factors does PAN-OS?software support for MFA (Choose three.)

  1. Push

  2. Pull

  3. Okta Adaptive

  4. Voice

  5. SMS

Correct Answer: ADE


https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/authentication/configure- multi-factor-authentication

Question No.136

Which PAN-OS?policy must you configure to force a user to provide additional credentialsbefore he is allowed to access an internal application that contains highly-sensitive business data?

  1. Security policy

  2. Decryption policy

  3. Authentication policy

  4. Application Override policy

Correct Answer: C

Question No.137

Which three settings are defined within the Templates object of Panorama? (Choose three.)

  1. Setup

  2. Virtual Routers

  3. Interfaces

  4. Security

  5. Application Override

Correct Answer: ADE

Question No.138

An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs. The administrator assigns priority 100 to the active firewall. Which priority is correct for the passive firewall?









Correct Answer: D

Explanation: https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/framemaker/71/pan- os/pan-os/section_5.pdf (page 9)

Question No.139

What will be the egress interface if the traffic#39;s ingress interface is ethernet1/6 sourcing from and to the destination during the time shown in the image?


  1. ethernet1/7

  2. ethernet1/5

  3. ethernet1/6

  4. ethernet1/3

Correct Answer: D

Question No.140

Which interface configuration will accept specific VLAN IDs?

  1. Tab Mode

  2. Subinterface

  3. Access Interface

  4. Trunk Interface

Correct Answer: B

Get Full Version of the Exam