PCNSE Flash Cards, PCNSE with
verified answers graded A+
How many firewalls warrant the use of Panorama - correct answer ✔✔6
A PA's default MGT IP is - correct answer ✔✔192.168.1.1
Disable ________ and _________ on the MGT interface - correct answer ✔✔Telnet and HTTP
Palo Alto recommends not giving the ____ port _______ access, instead: give ______ access to a
_______ port - correct answer ✔✔MGT, external, external, data
___________ ________________ are how a PA accesses updates, etc., they can be customized per vsys -
correct answer ✔✔Service routes
How do you configure service routes - correct answer ✔✔Device > setup > services > global > service
route configuration
What is the security policy best practice regarding IDing applications? - correct answer ✔✔Use the
application ID, NOT the application's usual port.
How should you leave the service tab configured in a security policy rule for the most effective filtering? -
correct answer ✔✔Application default, not 'any'
The threat prevention license includes.... - correct answer ✔✔A/V, anti-spyware, and vulnerability
protection
The decryption mirroring license allows... - correct answer ✔✔Decrypted traffic to be sent to a separate
collector
,The URL filtering license allows... - correct answer ✔✔The ability to make security policy rules based on
dynamic URL categories
What are the three different options for URL filtering updates? - correct answer ✔✔Brightcloud
Pan-db public
Pan-db private (on-prem appliance)
The virtual systems license allows... - correct answer ✔✔PA-3000 to have multiple vsys
PA-4000,5000,5200 and 7000 to have more than default vsys (varies by platform)
What platforms do not support virtual systems - correct answer ✔✔PA 800, 500, 200, 220 and VM series
Can you get wildfire updates without a wildfire license? What license allows this? - correct answer
✔✔Yes you can, with the threat prevention license
What types of files can you scan with a WF license - correct answer ✔✔PDF
APK
JAVA
Office Suite
How fast can you get wildfire updates if you have a WF license? - correct answer ✔✔Real-time,
immediately
How often does Palo recommend getting WF updates with a WF license? - correct answer ✔✔Every
minute
Can you get WF updates from a WF-500 appliance with the threat prevention license? - correct answer
✔✔No, you need a WF license for this function
Can you deploy Global Protect without a Global Protect license? - correct answer ✔✔Yes
,What additional Global Protect features does the Global Protect license provide? - correct answer
✔✔IPV6
Mobile App
Clientless VPN
What is AutoFocus? - correct answer ✔✔Graphical analysis of Firewall logs
What are the three options you can use to activate a license? - correct answer ✔✔Retrieve license keys
from license server
Use authorization code
Manually upload using license key
What license activation requires a commit before it becomes functional? - correct answer ✔✔WF license
What are the different types of content updates (7)? - correct answer ✔✔A/V
APPLICATIONS
APPLICATIONS AND THREATS
GLOBAL PROTECT DATA FILE
GLOBAL PROTECT CLIENTLESS VPN
BRIGHTCLOUD URL FILTERING
WILDFIRE
WF-PRIVATE
A/V content updates require what license - correct answer ✔✔TP
Do application content updates require a license? - correct answer ✔✔No, just a valid support contract
Do application and threat content updates require a license? - correct answer ✔✔Yes, TP license
, What is the purpose of global protect data file content updates? - correct answer ✔✔Vendor specific
info for evaluating HIP data returned by Global Protect agent
What license if required for GP data file content updates? - correct answer ✔✔GP license
What is the purpose of global protect clientless vpn content updates? - correct answer ✔✔App
signatures for clientless access to common web apps
What is the purpose of Brightcloud URL filtering content updates? - correct answer ✔✔Used to gather
brightcloud URL filtering DB updates
How often are Brightcloud updates published? - correct answer ✔✔Daily
Do you need to schedule PAN-DB URL filtering updates? - correct answer ✔✔No, they are pushed
automatically
What is the purpose of WF content updates? - correct answer ✔✔Realtime MW and A/V sigs
If you only have a threat prevention license, how often can you get WF updates? - correct answer
✔✔Every 24 to 48 hours
What is the purpose of wf-500 content updates? - correct answer ✔✔To get WF updates from a WF-500
appliance
What do you point your Palo to if you cannot use the usual updates.paloaltonetworks.com CDN for
updates? - correct answer ✔✔staticupdates.paloaltonetworks.com
What are the different license types in PA (5)? - correct answer ✔✔THREAT PREVENTION
DECRYPTION MIRRORING
URL FILTERING
verified answers graded A+
How many firewalls warrant the use of Panorama - correct answer ✔✔6
A PA's default MGT IP is - correct answer ✔✔192.168.1.1
Disable ________ and _________ on the MGT interface - correct answer ✔✔Telnet and HTTP
Palo Alto recommends not giving the ____ port _______ access, instead: give ______ access to a
_______ port - correct answer ✔✔MGT, external, external, data
___________ ________________ are how a PA accesses updates, etc., they can be customized per vsys -
correct answer ✔✔Service routes
How do you configure service routes - correct answer ✔✔Device > setup > services > global > service
route configuration
What is the security policy best practice regarding IDing applications? - correct answer ✔✔Use the
application ID, NOT the application's usual port.
How should you leave the service tab configured in a security policy rule for the most effective filtering? -
correct answer ✔✔Application default, not 'any'
The threat prevention license includes.... - correct answer ✔✔A/V, anti-spyware, and vulnerability
protection
The decryption mirroring license allows... - correct answer ✔✔Decrypted traffic to be sent to a separate
collector
,The URL filtering license allows... - correct answer ✔✔The ability to make security policy rules based on
dynamic URL categories
What are the three different options for URL filtering updates? - correct answer ✔✔Brightcloud
Pan-db public
Pan-db private (on-prem appliance)
The virtual systems license allows... - correct answer ✔✔PA-3000 to have multiple vsys
PA-4000,5000,5200 and 7000 to have more than default vsys (varies by platform)
What platforms do not support virtual systems - correct answer ✔✔PA 800, 500, 200, 220 and VM series
Can you get wildfire updates without a wildfire license? What license allows this? - correct answer
✔✔Yes you can, with the threat prevention license
What types of files can you scan with a WF license - correct answer ✔✔PDF
APK
JAVA
Office Suite
How fast can you get wildfire updates if you have a WF license? - correct answer ✔✔Real-time,
immediately
How often does Palo recommend getting WF updates with a WF license? - correct answer ✔✔Every
minute
Can you get WF updates from a WF-500 appliance with the threat prevention license? - correct answer
✔✔No, you need a WF license for this function
Can you deploy Global Protect without a Global Protect license? - correct answer ✔✔Yes
,What additional Global Protect features does the Global Protect license provide? - correct answer
✔✔IPV6
Mobile App
Clientless VPN
What is AutoFocus? - correct answer ✔✔Graphical analysis of Firewall logs
What are the three options you can use to activate a license? - correct answer ✔✔Retrieve license keys
from license server
Use authorization code
Manually upload using license key
What license activation requires a commit before it becomes functional? - correct answer ✔✔WF license
What are the different types of content updates (7)? - correct answer ✔✔A/V
APPLICATIONS
APPLICATIONS AND THREATS
GLOBAL PROTECT DATA FILE
GLOBAL PROTECT CLIENTLESS VPN
BRIGHTCLOUD URL FILTERING
WILDFIRE
WF-PRIVATE
A/V content updates require what license - correct answer ✔✔TP
Do application content updates require a license? - correct answer ✔✔No, just a valid support contract
Do application and threat content updates require a license? - correct answer ✔✔Yes, TP license
, What is the purpose of global protect data file content updates? - correct answer ✔✔Vendor specific
info for evaluating HIP data returned by Global Protect agent
What license if required for GP data file content updates? - correct answer ✔✔GP license
What is the purpose of global protect clientless vpn content updates? - correct answer ✔✔App
signatures for clientless access to common web apps
What is the purpose of Brightcloud URL filtering content updates? - correct answer ✔✔Used to gather
brightcloud URL filtering DB updates
How often are Brightcloud updates published? - correct answer ✔✔Daily
Do you need to schedule PAN-DB URL filtering updates? - correct answer ✔✔No, they are pushed
automatically
What is the purpose of WF content updates? - correct answer ✔✔Realtime MW and A/V sigs
If you only have a threat prevention license, how often can you get WF updates? - correct answer
✔✔Every 24 to 48 hours
What is the purpose of wf-500 content updates? - correct answer ✔✔To get WF updates from a WF-500
appliance
What do you point your Palo to if you cannot use the usual updates.paloaltonetworks.com CDN for
updates? - correct answer ✔✔staticupdates.paloaltonetworks.com
What are the different license types in PA (5)? - correct answer ✔✔THREAT PREVENTION
DECRYPTION MIRRORING
URL FILTERING
