Palo Alto Networks Certified Network Security Engineer - PCNSE7 Exam Practice Test
Which three options does the WF-500 appliance support for local analysis? (Choose three)
Correct Answer: B,C,D
Firewall administrators cannot authenticate to a firewall GUI.
Which two logs on that firewall will contain authentication-related information useful in troubleshooting this issue? (Choose two.)
Which two logs on that firewall will contain authentication-related information useful in troubleshooting this issue? (Choose two.)
Correct Answer: A,D
Which three fields can be included in a pcap filter? (Choose three)
Correct Answer: A,C,D
Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).
What are three valid method of user mapping? (Choose three)
Correct Answer: B,C,E
How are IPV6 DNS queries configured to user interface ethernet1/3?
Correct Answer: B
Refer to Exhibit:


A firewall has three PDF rules and a default route with a next hop of 172.29.19.1 that is configured in the default VR.
A user named XX-bes a PC with a 192.168.101.10 IP address.
He makes an HTTPS connection to 172.16.10.29.
What is the next hop IP address for the HTTPS traffic from Wills PC.


A firewall has three PDF rules and a default route with a next hop of 172.29.19.1 that is configured in the default VR.
A user named XX-bes a PC with a 192.168.101.10 IP address.
He makes an HTTPS connection to 172.16.10.29.
What is the next hop IP address for the HTTPS traffic from Wills PC.
Correct Answer: A
Which two virtualized environments support Active/Active High Availability (HA) in PAN-OS
7 .0? (Choose two.)
7 .0? (Choose two.)
Correct Answer: B,D
Which two methods can be used to mitigate resource exhaustion of an application server? (Choose two)
Correct Answer: A,C
Which Security Policy Rule configuration option disables antivirus and anti-spyware scanning of server-to-client flows only?
Correct Answer: A
Which field is optional when creating a new Security Policy rule?
Correct Answer: A