100% Correct PCNSE7 Dumps 2021

NEW QUESTION 1
DRAG DROP
When using the predefined default profile, the policy will inspect for viruses on the decoders. Match each decoder with its default action.
Answer options may be used more than once or not at all.

Answer:

Explanation: IMAP , POP3 , SMTP - > Alert
HTTP,FTP,SMB -> Reset-both

NEW QUESTION 2
A network security engineer is asked to provide a report on bandwidth usage. Which tab in the ACC provides the information needed to create the report?

• A. Blocked Activity
• B. Bandwidth Activity
• C. Threat Activity
• D. Network Activity

Answer: D

NEW QUESTION 3
What are three possible verdicts that WildFire can provide for an analyzed sample? (Choose three)

• A. Clean
• B. Bengin
• C. Adware
• D. Suspicious
• E. Grayware
• F. Malware

Answer: BEF

Explanation: https://www.paloaltonetworks.com/documentation/70/pan-os/newfeaturesguide/wildfire-features/wildfire-grayware-verdict

NEW QUESTION 4
An administrator has left a firewall to use the default port for all management services. Which three functions are performed by the dataplane? (Choose three.)

• A. WildFire updates
• B. NAT
• C. NTP
• D. antivirus
• E. File blocking

Answer: ABC

NEW QUESTION 5
Which protection feature is available only in a Zone Protection Profile?

• A. SYN Flood Protection using SYN Flood Cookies
• B. ICMP Flood Protection
• C. Port Scan Protection
• D. UDP Flood Protections

Answer: A

NEW QUESTION 6
A firewall administrator is troubleshooting problems with traffic passing through the Palo Alto Networks firewall. Which method shows the global counters associated with the traffic after configuring the appropriate packet filters?

• A. From the CLI, issue the show counter global filter pcap yes command.
• B. From the CLI, issue the show counter global filter packet-filter yes command.
• C. From the GUI, select show global counters under the monitor tab.
• D. From the CLI, issue the show counter interface command for the ingress interface.

Answer: B

NEW QUESTION 7
The administrator has enabled BGP on a virtual router on the Palo Alto Networks NGFW, but new routes do not seem to be populating the virtual router.
Which two options would help the administrator troubleshoot this issue? (Choose two.)

• A. View the System logs and look for the error messages about BGP.
• B. Perform a traffic pcap on the NGFW to see any BGP problems.
• C. View the Runtime Stats and look for problems with BGP configuration.
• D. View the ACC tab to isolate routing issues.

Answer: CD

NEW QUESTION 8
Several offices are connected with VPNs using static IPv4 routes. An administrator has been tasked with implementing OSPF to replace static routing.
Which step is required to accomplish this goal?

• A. Assign an IP address on each tunnel interface at each site
• B. Enable OSPFv3 on each tunnel interface and use Area ID 0.0.0.0
• C. Assign OSPF Area ID 0.0.0.0 to all Ethernet and tunnel interfaces
• D. Create new VPN zones at each site to terminate each VPN connection

Answer: C

NEW QUESTION 9
Refer to the exhibit.

Which will be the egress interface if the traffic’s ingress interface is ethernet 1/7 sourcing from 192.168.111.3 and to the destination 10.46.41.113?

• A. ethernet1/6
• B. ethernet1/3
• C. ethernet1/7
• D. ethernet1/5

Answer: D

NEW QUESTION 10
A Network Administrator wants to deploy a Large Scale VPN solution. The Network Administrator has chosen a GlobalProtect Satellite solution. This configuration needs to be deployed to multiple remote offices and the Network Administrator decides to use Panorama to deploy the configurations.
How should this be accomplished?

• A. Create a Template with the appropriate IKE Gateway settings
• B. Create a Template with the appropriate IPSec tunnel settings
• C. Create a Device Group with the appropriate IKE Gateway settings
• D. Create a Device Group with the appropriate IPSec tunnel settings

Answer: B

NEW QUESTION 11
Which CLI command displays the current management plan memory utilization?

• A. > show system info
• B. > show system resources
• C. > debug management-server show
• D. > show running resource-monitor

Answer: B

Explanation: https://live.paloaltonetworks.com/t5/Management-Articles/Show-System-Resource-Command-Displays-CPU-Utilization-of-9999/ta-p/58149

NEW QUESTION 12
People are having intermittent quality issues during a live meeting via web application.

• A. Use QoS profile to define QoS Classes
• B. Use QoS Classes to define QoS Profile
• C. Use QoS Profile to define QoS Classes and a QoS Policy
• D. Use QoS Classes to define QoS Profile and a QoS Policy

Answer: C

NEW QUESTION 13
The company's Panorama server (IP 10.10.10.5) is not able to manage a firewall that was recently deployed. The firewall's dedicated management port is being used to connect to the management network.
Which two commands may be used to troubleshoot this issue from the CLI of the new firewall? (Choose two)

• A. test panoramas-connect 10.10.10.5
• B. show panoramas-status
• C. show arp all I match 10.10.10.5
• D. topdump filter "host 10.10.10.5
• E. debug dataplane packet-diag set capture on

Answer: BD

NEW QUESTION 14
A network security engineer has been asked to analyze Wildfire activity. However, the Wildfire Submissions item is not visible form the Monitor tab.
What could cause this condition?

• A. The firewall does not have an active WildFire subscription.
• B. The engineer's account does not have permission to view WildFire Submissions.
• C. A policy is blocking WildFire Submission traffic.
• D. Though WildFire is working, there are currently no WildFire Submissions log entries.

Answer: B

NEW QUESTION 15
Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?

• A. Configure a Decryption Profile and select SSL/TLS services.
• B. Set up SSL/TLS under Polices > Service/URL Category>Service.
• C. Set up Security policy rule to allow SSL communication.
• D. Configure an SSL/TLS Profile.

Answer: D

NEW QUESTION 16
Which three types of software will receive a Grayware verdict from WildFire? (Choose Three)

• A. Browser Toolbar
• B. Trojans
• C. Ransomeware
• D. Potentially unwanted programs
• E. Adware.

Answer: ADE

Explanation: https://www.paloaltonetworks.com/documentation/translated/70/newfeaturesguide/wildfire-features/wildfire-grayware-verdict

NEW QUESTION 17
An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

• A. Security policy rule allowing SSL to the target server
• B. Firewall connectivity to a CRL
• C. Root certificate imported into the firewall with “Trust” enabled
• D. Importation of a certificate from an HSM

Answer: A

NEW QUESTION 18
A Palo Alto Networks firewall is being targeted by an NTP Amplification attack and is being flooded with tens thousands of bogus UDP connections per second to a single destination IP address and post.
Which option when enabled with the correction threshold would mitigate this attack without dropping legitirnate traffic to other hosts insides the network?

• A. Zone Protection Policy with UDP Flood Protection
• B. QoS Policy to throttle traffic below maximum limit
• C. Security Policy rule to deny trafic to the IP address and port that is under attack
• D. Classified DoS Protection Policy using destination IP only with a Protect action

Answer: D

NEW QUESTION 19
What must be used in Security Policy Rule that contain addresses where NAT policy applies?

• A. Pre-NAT addresse and Pre-NAT zones
• B. Post-NAT addresse and Post-Nat zones
• C. Pre-NAT addresse and Post-Nat zones
• D. Post-Nat addresses and Pre-NAT zones

Answer: C

NEW QUESTION 20
Which option is an IPv6 routing protocol?

• A. RIPv3
• B. OSPFv3
• C. OSPv3
• D. BGP NG

Answer: B