PCNSE PCNSE Palo Alto Networks Firewall Configuration 2

Question 1

Which Palo Alto Networks feature allows you to define a logical grouping of interfaces that share the same security policy and is the fundamental building block for zone-based firewall policies?

Accepted Answer

Security Zone

Answer

Security Zones are logical groupings of interfaces that share the same security policy, forming the foundation of PAN-OS zone-based firewall policies.

Question 2

When configuring High Availability (HA) on a Palo Alto firewall, which HA mode uses an active/active configuration where both firewalls process traffic simultaneously?

Accepted Answer

Active/Active HA

Answer

Active/Active HA allows both firewalls to process traffic simultaneously, requiring session synchronization and typically used with dynamic routing protocols.

Question 3

A firewall administrator needs to allow traffic from the DMZ to the internet but block all return traffic that was not initiated from the DMZ. Which security policy configuration achieves this correctly?

Accepted Answer

Create an interzone policy from DMZ to Untrust with application 'any' and action 'allow'

Answer

An interzone policy from DMZ to Untrust with 'allow' action permits outbound traffic, while stateful inspection automatically blocks unsolicited inbound return traffic.

Question 4

What is the purpose of the 'commit and push' operation in Panorama when managing multiple firewalls?

Accepted Answer

Commits changes to Panorama and immediately pushes device group and template configurations to managed firewalls

Answer

'Commit and Push' in Panorama saves changes to Panorama's running config and simultaneously distributes device group policies and template settings to managed firewalls.

Question 5

Which PAN-OS feature inspects encrypted SSL/TLS traffic by acting as a man-in-the-middle, allowing App-ID and Content-ID to analyze the decrypted payload?

Accepted Answer

SSL Forward Proxy Decryption

Answer

SSL Forward Proxy Decryption intercepts outbound SSL/TLS connections, decrypts them for inspection, then re-encrypts before forwarding to the destination.

PCNSE Exam Practice Test

PCNSE Exam Practice Test

PCNSE PCNSE Palo Alto Networks Firewall Configuration 2