Sign in

Free PCNSE sample questions

Real questions from the Network Security Engineer practice bank, with the correct answer and an explanation for each one. No junk, no filler.

Try them in the simulator Same questions, with study, timed and flashcard modes.

Showing 10 of 20 free sample questions.

Question 1Choose one

An administrator sees several inbound sessions identified as unknown-tcp in the Traffic logs. The administrator determines that these sessions are from external users accessing the company’s proprietary accounting application. The administrator wants to reliably identify this traffic as their accounting application and to scan this traffic for threats. Which option would achieve this result?

Question 2Choose one

If an administrator does not possess a website’s certificate, Which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic when users browse to HTTP(S) websites?

Question 3Choose 2

Which two are valid ACC GlobalProtect Activity tab widgets? (Choose two.)

Question 4Choose one

Which administrative authentication method supports authorization by an external service?

Question 5Choose one

A company needs to preconfigure firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers. Which VPN configuration would adapt to changes when deployed to the future site?

Question 6Choose 4

Which four NGFW multi-factor authentication factors are supported by PAN-OS®? (Choose four.)

Question 7Choose one

An administrator has a requirement to export decrypted traffic from the Palo Alto Networks NGFW to a third-party, deep-level packet inspection appliance. Which interface type and license feature are necessary to meet the requirement?

Question 8Choose 2

Which two features does PAN-OS® software use to identify applications? (Choose two.)

Question 9Choose one

Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?

Question 10Choose 2

Refer to the figure. An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic. Which two Security policy rules will accomplish this configuration? (Choose two.)

10 more free samples are waiting

Create a free account to unlock the whole PCNSE sample bank, or get full access to all 395 practice questions in the simulator.

Create account