← Back to exam page

PCNSE – Palo Alto Networks Certified Network Security Engineer

Loading demo links...

Showing 13–15 of 20 questions

Question 13

A network administrator is troubleshooting an issue with Phase 2 of an IPSec VPN tunnel. The administrator determines that the lifetime needs to be changed to match the peer.

Where should this change be made?

Select an option, then click Submit answer.

  • ○

    IKE Gateway profile
  • ○

    IPSec Crypto profile
  • ○

    IPSec Tunnel settings
  • ○

    IKE Crypto profile
Question 14

A company is deploying User-ID in their network. The firewall learn needs to have the ability to see and choose from a list of usernames and user groups directly inside the Panorama policies when creating new security rules

How can this be achieved?

Select an option, then click Submit answer.

  • ○

    By configuring Data Redistribution Client in Panorama > Data Redistribution
  • ○

    By configuring User-ID source device in Panorama > Managed Devices
  • ○

    By configuring User-ID group mapping in Panorama > User Identification
  • ○

    By configuring Master Device in Panorama > Device Groups
Question 15

Given the following configuration, which route is used for destination 10.10.0.4?

set network virtual-router 2 routing-table ip static-route "Route 1" nexthop ip-address 192.168.1.2 set network virtual-router 2 routing-table ip static-route "Route 1" metric 30

set network virtual-router 2 routing-table ip static-route "Route 1" destination 10.10.0.0/24

set network virtual-router 2 routing-table ip static-route "Route 1" re route-table unicast

set network virtual-router 2 routing-table ip static-route "Route 2" nexthop ip-address 192.168.1.2

set network virtual-router 2 routing-table ip static-route "Route 2" metric 20

set network virtual-router 2 routing-table ip static-route "Route 2" destination 10.10.0.0/24 set network virtual-router 2 routing-table ip static-route "Route 2" route-table unicast set network virtual-router 2 routing-table ip static-route "Route 3" nexthop ip-address 10.10.20.1

set network virtual-router 2 routing-table ip static-route "Route 3" metric 5

set network virtual-router 2 routing-table ip static-route "Route 3" destination 0.0.0.0/0 set network virtual-router 2 routing-table ip static-route "Route 3" route-table unicast set network virtual-router 2 routing-table ip static-route "Route 4" nexthop ip-address 192.168.1.2

set network virtual-router 2 routing-table ip static-route "Route 4" metric 10

set network virtual-router 2 routing-table ip static-route "Route 4" destination 10.10.1.0/25 set network virtual-router 2 routing-table ip static-route "Route 4" route-table unicast

Select an option, then click Submit answer.

  • ○

    Route 1
  • ○

    Route 3
  • ○

    Route 2
  • ○

    Route 4