最新のPCNSC問題集で試験を準備する

How can you verify that a new security policy is correctly blocking traffic without disrupting the network?

• A. Disable all other rules temporarily
• B. Use the test security-policy-match CLI command
• C. Implement the policy in a lab environment first
• D. Enable logging on the rule and monitor the logs

A customer has deployed a GlobalProtect portal and gateway as its remote-access VPN solution for its fleet of Windows 10 laptops The customer wants to use Host information Profile (HIP) data collected at the GlobalProtect gateway throughout its enterprise as an additional means of policy enforcement What additional licensing must the customer purchase?

• A. DNS Security on the perimeter firewall
• B. WildFire license
• C. GlobalProtect license for the gateway firewall
• D. GlobalProtect license for each firewall that will use HIP data to enforce policy

You are hosting a public-facing web server on your DMZ and access to that server is through a Palo Alto Networks firewall Both internal clients and internet clients access this web server using the FQDN public webserver acme com which resolves to the public address of 99.99 99.2 Which combination of NAT policies is necessary to enable access to the web server for both internal and internet clients?

• A.
  
• B.
  
• C.
  
• D.
  

A customer's Palo Alto Networks NGFW currently has only one security policy allowing all traffic They have identified that this is a substantial security risk and have heard that the Expedition tool can help them extract security policies from an "allow any" rule What should the consultant say about Expedition?

• A. Expedition cannot parse log files and therefore cannot be used for this purpose
• B. By using the Machine Learning feature Expedition can parse the traffic log files related to the polcy and extract security rules for matching traffic
• C. The log files can be viewed on Expedition, and right-clicking a log entry gives the option to create security policy from the log entry.
• D. Live firewall traffic can be viewed on Expedition when connected to a firewall, and Expedition can automatically create and push policies to the firewall

A customer who has a multi-tenant environment needs the administrator to be restricted lo specific objects and policies in the virtual system within its tenant How can an administrators access be restricted?

• A. Define access domains for virtual systems in the environment
• B. Define an Admin Role Profile with Panorama enabling all access
• C. Define an Admin Role Profile with a device group and template enabling all access
• D. Define an access domain thatenables the device groups assigned to the admin