Paloalto Certifications and Accreditations PCNSC Book

Palo Alto Networks Certified Network Security Consultant Questions and Answers

Question 9

View theGlobalProtect configuration screen capture.

What is the purpose of this configuration?

It forces an internal client to connect to an internal gateway at IP address 192 168 10 I.

It configures the tunnel address of all internal clients lo an IP address range starting at 192 168 10 1.

It forces the firewall to perform a dynamic DNS update, Which adds the internal gateway's hostname and IP address to the DNS server.

It enables a Client to perform a reverse DNS lookup on 192 .168. 10 .1. to delectit is an internal client.

Question 10

An administrator needs to optimize traffic to prefer business-critical applications overnon-critical applications.

QoS natively integrates with which feature to provide service quality?

port inspection

certification revocation

Content-ID

App-ID

Question 11

Refer to the exhibit.

A web server in the DMZ is being mapped to a public address through DNAT.

Which Security policy rule will allow traffic to flow to the web server?

Untrust (any) to Untrust (10. 1.1. 100), web browsing – Allow

Untrust (any) to Untrust (1. 1. 1. 100), web browsing – Allow

Untrust (any) to DMZ (1. 1. 1. 100), web browsing – Allow

Untrust (any) to DMZ (10. 1. 1. 100), web browsing – Allow