Free Palo Alto Networks PCNSE7 Exam Dumps Questions & Answers

A firewall administrator has completed most of the steps required to provision a standalone Palo Alto Networks Next-Generation Firewall. As a final step, the administrator wants to test one of the security policies.
Which CLI command syntax will display the rule that matches the test?

• A.show security rule source <ip_address> destination <IP_address> destination port <port number> protocol <protocol number>
• B.test security rule source <ip_address> destination <IP_address> destination port <port number> protocol <protocol number>
• C.test security -policy- match source <ip_address> destination <IP_address> destination port <port number> protocol <protocol number
• D.show security-policy-match source <ip_address> destination <IP_address> destination port <port number> protocol <protocol number> test security-policy-match source

Which three steps will reduce the CPU utilization on the management plane? (Choose three.)

• A.Disable predefined reports.
• B.Disable logging at session start in Security policies.
• C.Application override of SSL application.
• D.Disable SNMP on the management interface.
• E.Reduce the traffic being decrypted by the firewall.

A customer has an application that is being identified as unknown-top for one of their custom PostgreSQL database connections. Which two configuration options can be used to correctly categorize their custom database application? (Choose two.)

• A.Security policy to identify the custom application.
• B.Custom Service object.
• C.Application Override policy.
• D.Custom application.

When a malware-infected host attempts to resolve a known command-and-control server, the traffic matches a security policy with DNS sinhole enabled, generating a traffic log.
What will be the destination IP Address in that log entry?

• A.The IP Address specified in the sinkhole configuration
• B.The IP Address of one of the external DNS servers identified in the anti-spyware database
• C.The IP Address of the command-and-control server
• D.The IP Address of sinkhole.paloaltonetworks.com

An administrator is using Panorama and multiple Palo Alto Networks NGFWs. After upgrading all devices to the latest PAN-OS software, the administrator enables log forwarding from the firewalls to Panorama. Pre-existing logs from the firewalls are not appearing in Panorama.
Which action would enable the firewalls to send their pre-existing logs to Panorama?

• A.Use the ACC to consolidate pre-existing logs.
• B.The log database will need to exported form the firewalls and manually imported into Panorama.
• C.A CLI command will forward the pre-existing logs to Panorama.
• D.Use the import option to pull logs into Panorama.