Free Palo Alto Networks PCNSE Exam Questions

Become Palo Alto Networks Certified with updated PCNSE exam questions and correct answers

Page: 1 / 152

Total 760 Questions | Updated On: Jul 30, 2025

Add To Cart

Question 1

What are two requirements of IPSec in transport mode? (Choose two.)

A : IKEv1

B : NAT traversal

C : DH-group 20 (EC4 bits)

D : Auto-generated key

Answer: C,D

Question 2

What are two requirements of IPSec in transport mode? (Choose two.)

A : IKEv1

B : NAT traversal

C : DH-group 20 (EC4 bits)

D : Auto-generated key

Answer: C,D

Question 3

A firewall architect is attempting to install a new Palo Alto Networks NGFW. The company has previously had issues moving all administrative functions onto a data plane interface to meet the design limitations of the environment. The architect is able to access the device for HTTPS and SSH; however, the NGFW can neither validate licensing nor get updates. Which action taken by the architect will resolve this issue?

A : Create a service route that sets the source interface to the data plane interface in question

B : Validate that all upstream devices will allow and properly route the outbound traffic to the external destinations needed

C : Create a loopback from the management interface to the data plane interface, then make a service route from the management interface to the data plane interface

D : Enable OCSP for the data plane interface so the firewall will create a certificate with the data plane interface’s IP

Answer: B

Question 4

Refer to the exhibit. An administrator cannot see any of the Traffic logs from the Palo Alto Networks NGFW on Panorama. The configuration problem seems to be on the firewall side. Where is the best place on the Palo Alto Networks NGFW to check whether the configuration is correct?