Free Palo Alto Networks PCNSE6 Exam Dumps Questions & Answers

HOTSPOT
Within a Zone Protection Profile, under the Reconnaissance Protection tab, there are several possible values for Action:

Match each Reconnaissance Protection Action to its description. Answer options may be used more than once or not at all.

Correct Answer:

Explanation:
Allow: Permits the port scan attempts.
Alert: Generates an alert for each scan that matches the threshold within the specified time
interval.
Block: Drops all traffic from the source to the destination.
Block IP: Drops all traffic for a specific period of time (in seconds). There are two options:
Source: Blocks traffic from the source
Source-and-Destination: Blocks traffic for the source-destination pair https://live.paloaltonetworks.com/servlet/JiveServlet/previewBody/5078-102-514892/Understanding_DoS_Protection.pdf

A company hosts a publicly-accessible web server behind their Palo Alto Networks firewall, with
this configuration information:
-Users outside the company are in the "Untrust-L3" zone.
-The web server physically resides in the "Trust-L3" zone.
-Web server public IP address: 1.1.1.1
-Web server private IP address: 192.168.1.10
Which NAT Policy rule will allow users outside the company to access the web server?

• A.Option A
• B.Option D
• C.Option C
• D.Option B

HOTSPOT
Match each type of report provided by the firewall with its description. Answer options may be used more than once or not at all.

Correct Answer:

Explanation:
PDF Summary Reports - Reports that combine up to 18 custom or predefined reports from the Threat, Application, Traffic, URL Filtering Categories into one document. Report Groups - Reports the combine other custom and predefined reports into a single file to be emailed to one or more recipients. Custom Reports - Reports created by an administrator that filter on conditions and columns User or Groups Activity Reports - Reports on the application use and URL activity for a specific user or a group
Reference: https://www.paloaltonetworks.com/content/dam/paloaltonetworkscom/en_US/assets/pdf/framemaker/61/panorama/Panorama_AdminGuide/section_6.pdf page 151

By default, all PA-5060 syslog data is forwarded out the Management interface. What needs to be configured in order to send syslog data out of a different interface?

• A.Configure a Service Route for the Syslog service to use a dataplane interface.
• B.Configure an Interface Management Profile and apply it to the interface that the syslogs will be sent through.
• C.Create a Log-Forwarding Profile that points to the device that will receive the syslogs.
• D.Configure Service Route Only for Threats and URL Filtering, and the traffic will use the same route.

How is the Forward Untrust Certificate used?

• A.It is used for Captive Portal to identify unknown users.
• B.It is used when web servers request a client certificate.
• C.It is the issuer for an external certificate which is not trusted by the firewall.
• D.It issues certificates encountered on the Untrust security zone.