Get real exam questions for PCNSE6 Palo Alto Networks Certified Network Security Engineer 6.0. 100% Free.
Q1. Which source address translation type will allow multiple devices to share a single translated source address while using a single NAT Policy rule? A. Dynamic IP and Port B. Dynamic IP C. Bi-directional D. Static IP View AnswerAnswer: A Explanation: Reference: https://www.paloaltonetworks.com/documentation/61/pan-os/pan-os/networking/nat.html Q2. Which routing protocol is supported
Q1. What are the benefits gained when the "Enable Passive DNS Monitoring" checkbox is chosen on the firewall? (Select all correct answers.) A. Improved DNSbased C&C signatures. B. Improved PANDB malware detection. C. Improved BrightCloud malware detection. D. Improved malware detection in WildFire. View AnswerAnswer: A,B,D Q2. WildFire Analysis Reports are available for the following
Q1. A network administrator uses Panorama to push security policies to managed firewalls at branch offices. Which policy type should be configured on Panorama if the administrator wishes to allow local administrators at the branch office sites to override these policies? A. Implicit Rules B. Post Rules C. Default Rules D. Pre Rules View AnswerAnswer: D Q2. Given the following routing tab
Q1. Administrative Alarms can be enabled for which of the following except? A. Certificate Expirations B. Security Violation Thresholds C. Security Policy Tags D. Traffic Log capacity View AnswerAnswer: A Q2. A network engineer experienced network reachability problems through the firewall. The routing table on the device is complex. To troubleshoot the problem the engineer ran a Command
Q1. A "Continue" action can be configured on the following Security Profiles: A. URL Filtering, File Blocking, and Data Filtering B. URL Filteringn C. URL Filtering and Antivirus D. URL Filtering and File Blocking View AnswerAnswer: D Q2. Which of the following options may be enabled to reduce system overhead when using Content ID? A. STP B. VRRP C. RSTP D. DSRI View AnswerAnswer: D
Q1. Traffic going to a public IP address is being translated by your PANW firewall to your web server's private IP. Which IP should the Security Policy use as the "Destination IP" in order to allow traffic to the server. A. The server’s public IP B. The firewall’s gateway IP C. The server’s private IP D. The firewall’s MGT IP View AnswerAnswer: A Q2. What built-in administrato