최신Palo Alto Networks Certified Network Security Consultant - PCNSC무료샘플문제
문제1
Match the App-ID adoption task with its order in the process.
Match the App-ID adoption task with its order in the process.
정답:
Explanation:
To match the App-ID adoption task with its order in the process, follow these steps:
* Perform a like-for-like (Layer 3/4) migration from the legacy firewall to the Palo Alto Networks NGFW.
* This is the initial step to ensure that the Palo Alto Networks NGFW is in place and functioning with the existing security policies.
* Capture, retain, and verify that all traffic has been logged for a period of time.
* This step involves enabling logging and monitoring traffic to understand the application usage and to ensure that all traffic is being logged.
* Clone the legacy rules and add application information to the intended application-based rules.
* This step involves creating copies of the existing rules and enhancing them with application-specific information using App-ID.
* Verify that no traffic is hitting the legacy rules.
* After creating application-based rules, ensure that traffic is now hitting these new rules instead of the legacy rules. This indicates that the transition to App-ID based policies is successful.
* Remove the legacy rules.
* Once it is confirmed that no traffic is hitting the legacy rules and the new App-ID based rules are effectively managing the traffic, the legacy rules can be safely removed.
Order in Process:
* Perform a like-for-like (Layer 3/4) migration from the legacy firewall to the Palo Alto Networks NGFW.
* Capture, retain, and verify that all traffic has been logged for a period of time.
* Clone the legacy rules and add application information to the intended application-based rules.
* Verify that no traffic is hitting the legacy rules.
* Remove the legacy rules.
References:
* Palo Alto Networks - App-ID Best Practices: https://docs.paloaltonetworks.com/best-practices
* Palo Alto Networks - Migration from Legacy Firewalls: https://docs.paloaltonetworks.com/migration
문제2
Instead of disabling App-IDs regularly, a security policy rule is going to be configured to temporarily allow new App-IDs. In which two circumstances is it valid to disable App-IDs as part of content update-?
(Choose two)
Instead of disabling App-IDs regularly, a security policy rule is going to be configured to temporarily allow new App-IDs. In which two circumstances is it valid to disable App-IDs as part of content update-?
(Choose two)
정답: B,C
설명: (KoreaDumps 회원만 볼 수 있음)
문제3
Which interface deployments support the Aggregate Ethernet Active configuration? (Choose three.)
Which interface deployments support the Aggregate Ethernet Active configuration? (Choose three.)
정답: B,C,E
설명: (KoreaDumps 회원만 볼 수 있음)
문제4
Which Panorama operational mode is necessary to manage a large number of firewalls and also act as a log collector?
Which Panorama operational mode is necessary to manage a large number of firewalls and also act as a log collector?
정답: C
문제5
Which two conditions must be met for a firewall to successfully forward traffic to a syslog server? (Choose two)
Which two conditions must be met for a firewall to successfully forward traffic to a syslog server? (Choose two)
정답: C,D
문제6
What is the purpose of the WildFire Analysis Profile in a security policy?
What is the purpose of the WildFire Analysis Profile in a security policy?
정답: D
문제7
What command can you use to check the status of GlobalProtect clients connected to the firewall?
What command can you use to check the status of GlobalProtect clients connected to the firewall?
정답: B