PCNSE7及びPCNSE6試験のいずれかに合格すると、PCNSE証明書が授与されます。PCNSE7認定試験では、ホストされ、サードパーティのテスト会社ピアソンVUEによって試験監督されています。
PCNSE7試験問題集概要
試験コード：PCNSE7
試験名称：Palo Alto Networks Certified Network Security Engineer
問題と解答：60 Q&As
Palo alto Networks ACE 試験はパロアルトネットワークスの製品、付加価値再販業者、プリセールスシステムエンジニア、システムインテグレータ、およびサポートスタッフを使用する顧客を含むパロアルトネットワーク技術の深い理解を実証することを望む誰もが取られるべきです。
本試験に近い出題傾向で受験前の最終確認として抜群の効果！
PCNSE7試験問題集のデモをご参考ください。
1.How is the Forward Untrust Certificate used?
A. It issues certificates encountered on the Untrust security zone when clients attempt to connect to a site
that has be decrypted/
B. It is used when web servers request a client certificate.
C. It is presented to clients when the server they are connecting to is signed by a certificate authority that
is not trusted by firewall.
D. It is used for Captive Portal to identify unknown users.
Answer: A
2.A firewall administrator has completed most of the steps required to provision a standalone Palo Alto
Networks Next-Generation Firewall. As a final step, the administrator wants to test one of the security
policies.
Which CLI command syntax will display the rule that matches the test?
A. test security -policy- match source <ip_address> destination <IP_address> destination port <port
number> protocol <protocol number
B. show security rule source <ip_address> destination <IP_address> destination port <port number>
protocol <protocol number>
C. test security rule source <ip_address> destination <IP_address> destination port <port number>
protocol <protocol number>
D. show security-policy-match source <ip_address> destination <IP_address> destination port <port
number> protocol <protocol number> test security-policy-match source
Answer: A
3.The web server is configured to listen for HTTP traffic on port 8080. The clients access the web server
using the IP address 1.1.1.100 on TCP Port 80. The destination NAT rule is configured to translate both IP
address and report to 10.1.1.100 on TCP Port 8080.
Which NAT and security rules must be configured on the firewall? (Choose two)
A. A security policy with a source of any from untrust-I3 Zone to a destination of 10.1.1.100 in dmz-I3 zone
using web-browsing application
B. A NAT rule with a source of any from untrust-I3 zone to a destination of 10.1.1.100 in dmz-zone using
service-http service.
C. A NAT rule with a source of any from untrust-I3 zone to a destination of 1.1.1.100 in untrust-I3 zone
using service-http service.
D. A security policy with a source of any from untrust-I3 zone to a destination of 1.1.100 in dmz-I3 zone
using web-browsing application.
Answer: A
4.A company has a pair of Palo Alto Networks firewalls configured as an Acitve/Passive High Availability
(HA) pair.
What allows the firewall administrator to determine the last date a failover event occurred?
A. From the CLI issue use the show System log
B. Apply the filter subtype eq ha to the System log
C. Apply the filter subtype eq ha to the configuration log
D. Check the status of the High Availability widget on the Dashboard of the GUI
Answer: D
5.A network administrator uses Panorama to push security polices to managed firewalls at branch offices.
Which policy type should be configured on Panorama if the administrators at the branch office sites to
override these products?
A. Pre Rules
B. Post Rules
C. Explicit Rules
D. Implicit Rules
Answer: A