PCNSE7 試験問題を無料オンラインアクセス

Which event will happen if an administrator uses an Application Override Policy?

• A.App-ID processing time is increased.
• B.The Palo Alto Networks NGFW stops App-ID processing at Layer 4.
• C.The application name assigned to the traffic by the security rule is written to the Traffic log.
• D.Threat-ID processing time is decreased.

The web server is configured to listen for HTTP traffic on port 8080. The clients access the web server using the IP address 1.1.1.100 on TCP Port 80. The destination NAT rule is configured to translate both IP address and report to 10.1.1.100 on TCP Port 8080.

Which NAT and security rules must be configured on the firewall? (Choose two)

• A.A security policy with a source of any from untrust-I3 zone to a destination of 1.1.100 in dmz-I3 zone using web-browsing application.
• B.A security policy with a source of any from untrust-I3 Zone to a destination of 10.1.1.100 in dmz-I3 zone using web-browsing application
• C.A NAT rule with a source of any from untrust-I3 zone to a destination of 1.1.1.100 in untrust-I3 zone using service-http service.
• D.A NAT rule with a source of any from untrust-I3 zone to a destination of 10.1.1.100 in dmz-zone using service-http service.

Which two options are required on an M-100 appliance to configure it as a Log Collector? (Choose two)

• A.From the Panorama tab of the Panorama GUI select Log Collector mode and then commit changes
• B.Enter the command request system system-mode logger then enter Y to confirm the change to Log Collector mode.
• C.Enter the command logger-mode enable the enter Y to confirm the change to Log Collector mode.
• D.Log in the Panorama CLI of the dedicated Log Collector
• E.From the Device tab of the Panorama GUI select Log Collector mode and then commit changes.

After pushing a security policy from Panorama to a PA-3020 firwall, the firewall administrator notices that traffic logs from the PA-3020 are not appearing in Panorama's traffic logs. What could be the problem?

• A.The firewall is not licensed for logging to this Panorama device.
• B.A Server Profile has not been configured for logging to this Panorama device.
• C.Panorama is not licensed to receive logs from this particular firewall.
• D.None of the firwwall's policies have been assigned a Log Forwarding profile

Site-A and Site-B have a site-to-site VPN set up between them. OSPF is configured to dynamically create the routes between the sites. The OSPF configuration in Site-A is configured properly, but the route for the tunner is not being established. The Site-B interfaces in the graphic are using a broadcast Link Type. The administrator has determined that the OSPF configuration in Site-B is using the wrong Link Type for one of its interfaces.

Which Link Type setting will correct the error?

• A.Set tunnel. 1 to p2p
• B.Set Ethernet 1/1 to p2mp
• C.Set Ethernet 1/1 to p2p
• D.Set tunnel. 1 to p2mp