PCNSE Practice Test

An administrator configures HA on a customer's Palo Alto Networks firewalls with path monitoring by using the default configuration values. What are the default values for ping interval and ping count before a failover is triggered?

A. Ping interval of 200 ms and ping count of three failed pings

B. Ping interval of 5000 ms and ping count of 10 failed pings

C. Ping interval of 200 ms and ping count of 10 failed pings

D. Ping interval of 5000 ms and ping count of three failed pings

A company wants to deploy IPv6 on its network which requires that all company Palo Alto Networks firewalls process IPv6 traffic and to be configured with IPv6 addresses. Which consideration should the engineers take into account when planning to enable IPv6?

A. Device > Setup Settings Do not enable on each interface

B. Network > Zone Settings Do not enable on each interface

C. Network > Zone Settings Enable on each interface

D. Device > Setup Settings Enable on each interface

An engineer is pushing configuration from Panorama to a managed firewall What happens when the pushed Panorama configuration has Address Object names that duplicate the Address Objects already configured on the firewall?

A. The firewall ignores only the pushed objects that have the same name as the locally configured objects, and it will commit the rest of the pushed configuration.

B. The firewall fully commits all of the pushed configuration and overwrites its locally configured objects

C. The firewall rejects the pushed configuration, and the commit fails.

D. The firewall renames the duplicate local objects with "-1" at the end signifying they are clones; it will update the references to the objects accordingly and fully commit the pushed configuration.

Which statement about High Availability timer settings is true?

A. Use the Critical timer for faster failover timer settings.

B. Use the Aggressive timer for faster failover timer settings

C. Use the Moderate timer for typical failover timer settings

D. Use the Recommended timer for faster failover timer settings.

A firewall engineer is investigating high dataplane CPU utilization. To decrease the load on this CPU, what should be reduced?

A. The amount of decrypted traffic

B. The timeout value for admin sessions

C. The number of mapped User-ID groups

D. The number of permitted IP addresses on the management interface