PCNSE Online Practice Questions

Home / Palo Alto Networks / PCNSE

Latest PCNSE Exam Practice Questions

The practice questions for PCNSE exam was last updated on 2025-04-26 .

Viewing page 1 out of 21 pages.

Viewing questions 1 out of 106 questions.

Question#1

Before you upgrade a Palo Alto Networks NGFW, what must you do?

A. Make sure that the PAN-OS support contract is valid for at least another year
B. Export a device state of the firewall
C. Make sure that the firewall is running a version of antivirus software and a version of WildFire that support the licensed subscriptions.
D. Make sure that the firewall is running a supported version of the app + threat update

Explanation:
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/upgrade-pan-os/pan-os-upgrade-checklist#id53a2bc2b-f86e-4ee5-93d7-b06aff837a00 "Verify the minimum content release version."
Before you upgrade, make sure the firewall is running a version of app + threat (content version) that meets the minimum requirement of the new PAN-OS https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRrCAK

Question#2

A network administrator is trying to prevent domain username and password submissions to phishing sites on some allowed URL categories
Which set of steps does the administrator need to take in the URL Filtering profile to prevent credential phishing on the firewall?

A. Choose the URL categories on Site Access column and set action to block Click the User credential Detection tab and select IP User Mapping Commit
B. Choose the URL categories in the User Credential Submission column and set action to block Select the User credential Detection tab and select use IP User Mapping Commit
C. Choose the URL categories in the User Credential Submission column and set action to block Select the URL filtering settings and enable Domain Credential Filter Commit
D. Choose the URL categories in the User Credential Submission column and set action to block Select the User credential Detection tab and select Use Domain Credential Filter Commit

Question#3

An administrator is configuring a Panorama device group
Which two objects are configurable? (Choose two )

A. DNS Proxy
B. Address groups
C. SSL/TLS roles
D. URL Filtering profiles

Explanation:
URL filtering is a feature in Palo Alto Networks firewalls that allows administrators to block access to specific URLs [1]. This feature can be configured via four different objects: Custom URL categories in URL Filtering profiles, PAN-DB URL categories in URL Filtering profiles, External Dynamic Lists (EDL) in URL Filtering profiles, and Custom URL categories in Security policy rules. The evaluation order for URL filtering is: Custom URL categories in URL Filtering profile, PAN-DB URL categories in URL Filtering profile, EDL in URL Filtering profile, and Custom URL category in Security policy rule. This information can be found in the Palo Alto Networks PCNSE Study Guide, which can be accessed here: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/resource-library/palo-alto-networks-pcnse-study-guide.html.

Question#4

DRAG DROP
Match the terms to their corresponding definitions


A. 

Explanation:
✑ Provides configuration logging and reporting functions on a separate processor RAM. and hard drive -> Management plane
✑ Steam-based uniform signature matching including vulnerability exploits (IPS) virus. spyware. CC#. and SSN -> Signature matching
✑ High-density parallel processing for flexible hardware acceleration for standardized complex functions -> Security processing
✑ Hardware-accelerated per-packet route lookup MAC lookup and NAT -> Network processing

Question#5

While analyzing the Traffic log, you see that some entries show "unknown-tcp" in the Application column What best explains these occurrences?

A. A handshake took place, but no data packets were sent prior to the timeout.
B. A handshake took place; however, there were not enough packets to identify the application.
C. A handshake did take place, but the application could not be identified.
D. A handshake did not take place, and the application could not be identified.

Exam Code: PCNSEQ & A: 293 Q&AsUpdated:  2025-04-26

 Get All PCNSE Q&As