Palo Alto Networks Certified Network Security Engineer Free Sample Questions

Which three authentication factors does PAN-OS® software support for MFA? (Choose three.)

Which two subscriptions are available when configuring Panorama to push dynamic updates to connected devices? (Choose two.)

An administrator sees several inbound sessions identified as unknown-tcp in the Traffic logs. The administrator determines that these sessions are from external users accessing the company’s proprietary accounting application. The administrator wants to reliably identify this traffic as their accounting application and to scan this traffic for threats.

Which option would achieve this result?

If an administrator does not possess a website’s certificate,

Which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic when users browse to HTTP(S) websites?

Which two are valid ACC GlobalProtect Activity tab widgets? (Choose two.)

Which administrative authentication method supports authorization by an external service?

A company needs to preconfigure firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.

Which VPN configuration would adapt to changes when deployed to the future site?

Which four NGFW multi-factor authentication factors are supported by PAN-OS®? (Choose four.)

An administrator has a requirement to export decrypted traffic from the Palo Alto Networks NGFW to a third-party, deep-level packet inspection appliance.

Which interface type and license feature are necessary to meet the requirement?

Which two features does PAN-OS® software use to identify applications? (Choose two.)