← Back to exam page

PCNSE – Palo Alto Networks Certified Network Security Engineer

Loading demo links...

Showing 4–6 of 20 questions

Question 4

In a firewall, which three decryption methods are valid? (Choose three.)

Select all that apply, then click Submit answer.

  • ○

    SSL Outbound Proxyless Inspection
  • ○

    SSL Inbound Inspection
  • ○

    SSH Proxy
  • ○

    SSL Inbound Proxy
  • ○

    Decryption Mirror
Question 5

An administrator has enabled OSPF on a virtual router on the NGFW. OSPF is not adding new routes to the virtual router.

Which two options enable the administrator to troubleshoot this issue? (Choose two.)

Select all that apply, then click Submit answer.

  • ○

    View Runtime Stats in the virtual router.
  • ○

    View System logs.
  • ○

    Add a redistribution profile to forward as BGP updates.
  • ○

    Perform a traffic pcap at the routing stage.
Question 6

A firewall should be advertising the static route 10.2.0.0/24 Into OSPF. The configuration on the neighbor is correct, but the route is not in the neighbor's routing table.

Which two configurations should you check on the firewall? (Choose two.)

Select all that apply, then click Submit answer.

  • ○

    In the OSFP configuration, ensure that the correct redistribution profile is selected in the OSPF Export Rules section.
  • ○

    Within the redistribution profile ensure that Redist is selected.
  • ○

    Ensure that the OSPF neighbor state Is "2-Way."
  • ○

    In the redistribution profile check that the source type is set to "ospf."