Palo Alto Networks Certified Network Security Consultant (PCNSC): PCNSC

Which event will happen administrator uses an Application Override Policy?

A. The application name assigned to the traffic by the security rule is written to the traffic log.

B. The Palo Alto Networks NGFW Steps App-ID processing at Layer 4.

C. Threat-ID processing time is decreased.

D. App-ID processing time is increased.

When a malware-infected host attempts to resolve a known command-and-control server, the traffic matches a security policy with DNS sinhole enabled, generating a traffic log. What will be the destination IP Address in that log entry?

A. The IP Address of sinkhole.paloaltonetworks.com

B. The IP Address of the command-and-control server

C. The IP Address specified in the sinkhole configuration

D. The IP Address of one of the external DNS servers identified in the anti-spyware database

An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

A. firewall connectivity to a CRL

B. Root certificate imported into the firewall with "Trust" enabled

C. importation of a certificate from an HSM

D. Security policy rule allowing SSL to the target server