PCNSE Study Guide questions n
answers
Question: 1
When using certificate authentication for firewall administration, which method is used for
authorization? - correct answer ✔✔A. Radius
B. LDAP
C. Kerberos
D. Local
Question: 2
A network administrator wants to use a certificate for the SSL/TLS Service Profile. Which type of
certificate should the administrator use? - correct answer ✔✔A. certificate authority (CA) certificate
B. client certificate
C. machine certificate
D. server certificate
Question: 3
Using multiple templates in a stack to manage many firewalls provides which two advantages? (Choose
two.) - correct answer ✔✔A. inherit address-objects from templates
B. define a common standard template configuration for firewalls
C. standardize server profiles and authentication configuration across all stacks
D. standardize log-forwarding profiles for security polices across all stacks
Question: 4
A network security engineer is attempting to peer a virtual router on a PAN-OS firewall with an external
router using the BGP protocol. The peer relationship is not establishing. What command could the
engineer run to see the current state of the BGP state between the two devices? - correct answer ✔✔A.
show routing protocol bgp state
answers
Question: 1
When using certificate authentication for firewall administration, which method is used for
authorization? - correct answer ✔✔A. Radius
B. LDAP
C. Kerberos
D. Local
Question: 2
A network administrator wants to use a certificate for the SSL/TLS Service Profile. Which type of
certificate should the administrator use? - correct answer ✔✔A. certificate authority (CA) certificate
B. client certificate
C. machine certificate
D. server certificate
Question: 3
Using multiple templates in a stack to manage many firewalls provides which two advantages? (Choose
two.) - correct answer ✔✔A. inherit address-objects from templates
B. define a common standard template configuration for firewalls
C. standardize server profiles and authentication configuration across all stacks
D. standardize log-forwarding profiles for security polices across all stacks
Question: 4
A network security engineer is attempting to peer a virtual router on a PAN-OS firewall with an external
router using the BGP protocol. The peer relationship is not establishing. What command could the
engineer run to see the current state of the BGP state between the two devices? - correct answer ✔✔A.
show routing protocol bgp state