This page was exported from Braindump2go Free Exam Dumps with PDF and VCE Collection [ https://www.mcitpdump.com ] Export date:Wed Dec 4 8:29:42 2024 / +0000 GMT ___________________________________________________ Title: [2017-New-Version!]Free PCNSE7 Questions & Answers Offered by Braindump2go[Q85-Q101] --------------------------------------------------- 2017 February NEW PCNSE7 Exam Dumps (PDF & VCE) 101Q&As Updated Today!1.|NEW PCNSE7 Exam Dumps (PDF & VCE) 101Q&As Download:http://www.braindump2go.com/pcnse7.html 2.|NEW PCNSE7 Exam Questions & Answers Download:https://1drv.ms/f/s!AvI7wzKf6QBjgiORhA56QELmWMyo QUESTION 85Firewall administrators cannot authenticate to a firewall GUI. Which two logs on that firewall will contain authentication-related information useful in troubleshooting this issue? (Choose two.) A.    ms logB.    authd logC.    System logD.    Traffic logE.    dp-monitor log Answer: CD QUESTION 86Which option is an IPv6 routing protocol? A.    RIPv3B.    OSPFv3C.    OSPv3D.    BGP NG Answer: B QUESTION 87A network security engineer has a requirement to allow an external server to access an internal web server. The internal web server must also initiate connections with the external server.What can be done to simplify the NAT policy? A.    Configure ECMP to handle matching NAT trafficB.    Configure a NAT Policy rule with Dynamic IP and PortC.    Create a new Source NAT Policy rule that matches the existing traffic and enable the Bi- directional optionD.    Create a new Destination NAT Policy rule that matches the existing traffic and enable the Bi-directional option Answer: CExplanation:https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os/networking/nat-configuration-examples QUESTION 88A network design change requires an existing firewall to start accessing Palo Alto Updates from a data plane interface address instead of the management interface.Which configuration setting needs to be modified? A.    Service routeB.    Default routeC.    Management profileD.    Authentication profile Answer: A QUESTION 89A Network Administrator wants to deploy a Large Scale VPN solution. The Network Administrator has chosen a GlobalProtect Satellite solution. This configuration needs to be deployed to multiple remote offices and the Network Administrator decides to use Panorama to deploy the configurations.How should this be accomplished? A.    Create a Template with the appropriate IKE Gateway settingsB.    Create a Template with the appropriate IPSec tunnel settingsC.    Create a Device Group with the appropriate IKE Gateway settingsD.    Create a Device Group with the appropriate IPSec tunnel settings Answer: B QUESTION 90Which CLI command displays the current management plan memory utilization? A.    > show system infoB.    > show system resourcesC.    > debug management-server showD.    > show running resource-monitor Answer: BExplanation:https://live.paloaltonetworks.com/t5/Management-Articles/Show-System-Resource-Command-Displays-CPU-Utilization-of-9999/ta-p/58149 QUESTION 91Which URL Filtering Security Profile action logs the URL Filtering category to the URL Filtering log? A.    LogB.    AlertC.    AllowD.    Default Answer: BExplanation:https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os/url-filtering/url-filtering-profile-actions QUESTION 92What are two prerequisites for configuring a pair of Palo Alto Networks firewalls in an active/passive High Availability (HA) pair? (Choose two.) A.    The firewalls must have the same set of licenses.B.    The management interfaces must to be on the same network.C.    The peer HA1 IP address must be the same on both firewalls.D.    HA1 should be connected to HA1. Either directly or with an intermediate Layer 2 device. Answer: AC QUESTION 93Which three rule types are available when defining policies in Panorama? (Choose three.) A.    Pre RulesB.    Post RulesC.    Default RulesD.    Stealth RulesE.    Clean Up Rules Answer: ABCExplanation:https://www.paloaltonetworks.com/documentation/71/pan-os/web-interface-help/panorama-web-interface/defining-policies-on-panorama QUESTION 94A network design calls for a "router on a stick" implementation with a PA-5060 performing inter-VLAN routing All VLAN-tagged traffic will be forwarded to the PA-5060 through a single dot1q trunk interfaceWhich interface type and configuration setting will support this design? A.    Trunk interface type with specified tagB.    Layer 3 interface type with specified tagC.    Layer 2 interface type with a VLAN assignedD.    Layer 3 subinterface type with specified tag Answer: D QUESTION 95Which Panorama feature allows for logs generated by Panorama to be forwarded to an external Security Information and Event Management(SIEM) system? A.    Panorama Log SettingsB.    Panorama Log TemplatesC.    Panorama Device Group Log ForwardingD.    Collector Log Forwarding for Collector Groups Answer: AExplanation:https://www.paloaltonetworks.com/documentation/61/panorama/panorama_adminguide/manage-log-collection/enable-log-forwarding-from-panorama-to-external-destinations QUESTION 96Which URL Filtering Security Profile action togs the URL Filtering category to the URL Filtering log? A.    LogB.    AlertC.    AllowD.    Default Answer: D QUESTION 97Several offices are connected with VPNs using static IPV4 routes.An administrator has been tasked with implementing OSPF to replace static routing.Which step is required to accoumplish this goal? A.    Assign an IP address on each tunnel interface at each siteB.    Enable OSPFv3 on each tunnel interface and use Area ID 0.0.0.0C.    Assign OSPF Area ID 0.0.0.0 to all Ethernet and tunnel interfacesD.    Create new VPN zones at each site to terminate each VPN connection Answer: C QUESTION 98Which authentication source requires the installation of Palo Alto Networks software, other than PAN-OS 7x, to obtain a username-to-IP-address mapping? A.    Microsoft Active DirectoryB.    Microsoft Terminal ServicesC.    Aerohive Wireless Access PointD.    Palo Alto Networks Captive Portal Answer: B QUESTION 99Several offices are connected with VPNs using static IPv4 routes. An administrator has been tasked with implementing OSPF to replace static routing.Which step is required to accomplish this goal? A.    Assign an IP address on each tunnel interface at each siteB.    Enable OSPFv3 on each tunnel interface and use Area ID 0.0.0.0C.    Assign OSPF Area ID 0.0.0.0 to all Ethernet and tunnel interfacesD.    Create new VPN zones at each site to terminate each VPN connection Answer: C QUESTION 100People are having intermittent quality issues during a live meeting via web application. A.    Use QoS profile to define QoS ClassesB.    Use QoS Classes to define QoS ProfileC.    Use QoS Profile to define QoS Classes and a QoS PolicyD.    Use QoS Classes to define QoS Profile and a QoS Policy Answer: C QUESTION 101When is it necessary to activate a license when provisioning a new Palo Alto Networks firewall? A.    When configuring Certificate ProfilesB.    When configuring GlobalProtect portalC.    When configuring User Activity ReportsD.    When configuring Antivirus Dynamic Updates Answer: D !!!RECOMMEND!!! 1.|NEW PCNSE7 Exam Dumps (PDF & VCE) 101Q&As Download:http://www.braindump2go.com/pcnse7.html 2.|NEW PCNSE7 Sudy Guide Video: YouTube Video: YouTube.com/watch?v=IOX5uorwmA0 --------------------------------------------------- Images: --------------------------------------------------- --------------------------------------------------- Post date: 2017-02-22 02:16:26 Post date GMT: 2017-02-22 02:16:26 Post modified date: 2017-02-22 02:16:26 Post modified date GMT: 2017-02-22 02:16:26 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com