PCNSE v10 – Cyber Security, Networking, Technology Courses and Blog

Certification Provider: Palo Alto Networks

Exam: Palo Alto Networks Certified Network Security Engineer (PCNSE)

Exam Code: PCNSE v10

Total Question: 181

Question per Quiz: 75

Updated On: 20 April 2023

Note: In order to practice all the Q/A's, you have to practice multiple time. Question's and Answer's will be presented randomly and will help you get hands-on for real exam.

An organization is building a Bootstrap Package to deploy Palo Alto Networks VM-Series firewalls into their Microsoft Azure. Which two statements are correct regarding the bootstrap package contents? (Choose two)

The init-cfg txt and bootstrap.xml files are both optional configuration items for the /config folder

The directory structure must include a /config /content, /software and /license folders

The bootstrap xml file allows for automated deployment of VM-Series firewalls with full network and policy configurations.

The /config /content and /software folders are mandatory while the /license and /plugin folders are optional

The bootstrap package is stored on an AFS share or a discrete container file bucket

What file type upload is supported as part of the basic WildFire service?

VBS

BAT

ELF

None

A variable name must start with which symbol?

None

When you navigate to Network: > GlobalProtect > Portals > Method section, which three options are available? (Choose three)

pre-logon then on-demand

certificate-logon

post-logon (always on)

user-logon (always on)

on-demand (manual user initiated connection)

Cortex XDR notifies an administrator about grayware on the endpoints. There are no entries about grayware in any of the logs of the corresponding firewall. Which setting can the administrator configure on the firewall to log grayware verdicts?

within the log settings option in the Device tab

within the log forwarding profile attached to the Security policy rule

in WildFire General Settings, select "Report Grayware Files"

in Threat General Settings, select "Report Grayware Files"

None

A firewall is configured with SSL Forward Proxy decryption and has the following four enterprise certificate authorities (CAs): i. Enterprise-Trusted-CA, which is verified as Forward Trust Certificate (The CA is also installed in the trusted store of the end-user browser and system.) ii. Enterprise-Untrusted-CA, which is verified as Forward Untrust Certificate iii. Enterprise-Intermediate-CA iv. Enterprise-Root-CA, which is verified only as Trusted Root CA An end-user visits https://www.example-website.com/ with a server certificate Common Name (CN): www.example-website.com. The firewall does the SSL Forward Proxy decryption for the website and the server certificate is not trusted by the firewall. The end-user's browser will show that the certificate for www. example-website.com was issued by which of the following?

Enterprise-Trusted-CA which is a self-signed CA

Enterprise-Root-CA which is a self-signed CA

Enterprise-Intermediate-CA which was, in turn, issued by Enterprise-Root-CA

Enterprise-Untrusted-CA which is a self-signed CA

None

As a best practice, which URL category should you target first for SSL decryption?

Health and Medicine

Financial Services

Online Storage and Backup

High Risk

None

Which two are valid ACC GlobalProtect Activity tab widgets? (Choose two.)

GlobalProtect Quarantine Activity

Successful GlobalProtect Deployed Activity

GlobalProtect Deployment Activity

Successful GlobalProtect Connection Activity

When an in-band data port is set up to provide access to required services, what is required for an interface that is assigned to service routes?

You must enable DoS and zone protection

You must set the interface to Layer 2 Layer 3. or virtual wire

The interface must be used for traffic to the required services

You must use a static IP address

None

10.

What are three reasons why an installed session can be identified with the application incomplete" tag? (Choose three.)

The TCP connection was terminated without identifying any application data

The client sent a TCP segment with the PUSH flag set

The TCP connection did not fully establish

There is not enough application data after the TCP connection was established

There was no application data after the TCP connection was established

11.

An organization is building a Bootstrap Package to deploy Palo Alto Networks VM-Series firewalls into their AWS tenant. Which two statements are correct regarding the bootstrap package contents? (Choose two.)

The init-cfg.txt and bootstrap.xml files are both optional configuration items for the /config folder.

The bootstrap.xml file allows for automated deployment of VM-Series firewalls with full network and policy configurations.

The /config, /content and /software folders are mandatory while the /license and /plugin folders are optional.

The bootstrap package is stored on an AFS share or a discrete container file bucket.

The directory structure must include a /config, /content, /software and /license folders.

None

12.

An engineer must configure the Decryption Broker feature Which Decryption Broker security chain supports bi-directional traffic flow?

Layer 2 security chain

Transparent Proxy security chain

Layer 3 security chain

Transparent Bridge security chain

None

13.

An internal system is not functioning. The firewall administrator has determined that the incorrect egress interface is being used After looking at the configuration, the administrator believes that the firewall is not using a static route What are two reasons why the firewall might not use a static route"? (Choose two.)

duplicate static route

no install on the route

disabling of the static route

path monitoring on the static route

14.

Refer to the exhibit. An administrator cannot see any if the Traffic logs from the Palo Alto Networks NGFW on Panorama. The configuration problem seems to be on the firewall side. Where is the best place on the Palo Alto Networks NGFW to check whether the configuration is correct?

None

15.

An engineer is tasked with deploying SSL Forward Proxy decryption for their organization. What should they review with their leadership before implementation?

Browser-supported cipher documentation

Legal compliance regulations and acceptable usage policies

Cipher documentation supported by the endpoint operating system

URL risk-based category distinctions

None

16.

In a security-first network what is the recommended threshold value for content updates to be dynamically updated?

1 to 4 hours

24 hours

6 to 12 hours

36 hours

None

17.

Which two statements correctly identify the number of Decryption Broker security chains that are supported on a pair of decryption-forwarding interfaces'? (Choose two)

L3 security chains support up to 64 security chains

A single transparent bridge security chain is supported per firewall

L3 security chains support up to 32 security chains

A single transparent bridge security chain is supported per pair of interface

18.

Which User-ID mapping method should be used in a high-security environment where all IP address-to-user mappings should always be explicitly known?

GlobalProtect

Windows-based User-ID agent

LDAP Server Profile configuration

PAN-OS integrated User-ID agent

None

19.

The decision to upgrade to PAN-OS 10.2 has been approved. The engineer begins the process by upgrading the Panorama servers, but gets an error when trying to install. When performing an upgrade on Panorama to PAN-OS 10.2, what is the potential cause of a failed install?

Expired certificates.

Global Protect agent version.

Outdated plugins.

Management only mode

None

20.

An administrator discovers that a file blocked by the WildFire inline ML feature on the firewall is a false-positive action. How can the administrator create an exception for this particular file?

Disable the WildFire profile on the related Security policy.

Set the WildFire inline ML action to allow for that protocol on the Antivirus profile.

Add the related Threat ID in the Signature exceptions tab of the Antivirus profile.

Add partial hash and filename in the file section of the WildFire inline ML tab of the Antivirus profile.

None

21.

How can an administrator configure the firewall to automatically quarantine a device using GlobalProtect?

by exporting the list of quarantined devices to a pdf or csv file by selecting PDF/CSV at the bottom of the Device Quarantine page and leveraging the appropriate XSOAR playbook

by adding the device's Host ID to a quarantine list and configure GlobalProtect to prevent users from connecting to the GlobalProtect gateway from a quarantined device

by using security policies, log forwarding profiles, and log settings

there is no native auto-quarantine feature so a custom script would need to be leveraged

None

22.

When overriding a template configuration locally on a firewall, what should you consider?

Only Panorama can revert the override

Panorama will lose visibility into the overridden configuration

The firewall template will show that it is out of sync within Panorama

Panorama will update the template with the overridden value

None

23.

An administrator is using Panorama to manage me and suspects an IKE Crypto mismatch between peers, from the firewalls to Panorama. However, pre-existing logs from the firewalls are not appearing in Panorama. Which action should be taken to enable the firewalls to send their pre-existing logs to Panorama?

Use the ACC to consolidate the logs.

Export the log database.

Use the import option to pull logs.

Use the scp logdb export command.

None

24.

What are three types of Decryption Policy rules? (Choose three.)

SSL Forward Proxy

Decryption Broker

SSH Proxy

SSL Inbound Inspection

Decryption Mirror

25.

An administrator receives the following error message: "IKE phase-2 negotiation failed when processing Proxy ID. Received local id 192. 168.33.33/24 type IPv4 address protocol 0 port 0, received remote id 172.16.33.33/24 type IPv4 address protocol 0 port 0." How should the administrator identify the root cause of this error message?

Check whether the VPN peer on one end is set up correctly using policy-based VPN.

Verify that the IP addresses can be pinged and that routing issues are not causing the connection failure.

In the IPSec Crypto profile configuration, verify that PFS is either enabled on both VPN peers or disabled on both VPN peers.

In the IKE Gateway configuration, verify that the IP address for each VPN peer is accurate.

None

26.

What are two characteristic types that can be defined for a variable? (Choose two.)

Path group

Zone

FDQN

IP Netmask

27.

As a best practice, which URL category should you target first for SSL decryption?

Financial Services

Online Storage and Backup

High Risk

Health and Medicine

None

28.

Which option is part of the content inspection process?

Packet forwarding process

SSL Proxy re-encrypt

IPsec tunnel encryption

Packet egress process

None

29.

A company with already deployed Palo Alto firewalls has purchased their first Panorama server. The security team has already configured all firewalls with the Panorama IP address and added all the firewall serial numbers in Panorama. What are the next steps to migrate configuration from the firewalls to Panorama?

Export Named Configuration Snapshot on each firewall, followed by Impart Named Configuration Snapshot in Panorama.

Use the Firewall Migration plugin to retrieve the configuration directly from the managed devices.

Import Device Configuration to Panorama, followed by Export or Push Device Config Bundle.

Use API calls to retrieve the configuration directly from the managed devices.

None

30.

An engineer is configuring Packet Buffer Protection on ingress zones to protect from single-session DoS attacks. Which sessions does Packet Buffer Protection apply to?

It applies to existing sessions and is not global

It applies to existing sessions and is global

It applies to new sessions and is not global

It applies to new sessions and is global

None

31.

An administrator has a PA-820 firewall with an active Threat Prevention subscription. The administrator is considering adding a WildFire subscription How does adding the WildFire subscription improve the security posture of the organization?

WildFire and Threat Prevention combine to provide the utmost security posture for the firewall

WildFire and Threat Prevention combine to minimize the attack surface

Protection against unknown malware can be provided in near real-time

After 24 hours WildFire signatures are included in the antivirus update

None

32.

What are three types of Decryption Policy rules? (Choose three.)

Decryption Broker

SSH Proxy

Decryption Mirror

SSL Forward Proxy

SSL Inbound Inspection

33.

A network engineer has discovered that asymmetric routing is causing a Palo Alto Networks firewall to drop traffic. The network architecture cannot be changed to correct this. Which two actions can be taken on the firewall to allow the dropped traffic permanently? (Choose two.)

> set session tcp-reject-non-syn no

#set deviceconfig setting session tcp-reject-non-syn no

Navigate to Network > Zone Protection Click Add Select Packet Based Attack Protection > TCP/IP Drop Set "Reject Non-syn-TCP" to No Set "Asymmetric Path" to Bypass

Navigate to Network > Zone Protection Click Add Select Packet Based Attack Protection > TCP/IP Drop Set "Reject Non-syn-TCP" to Global Set ג€Asymmetric Path" to Global

34.

What is a correct statement regarding administrative authentication using external services with a local authorization method?

The administrative accounts you define on an external authentication server serve as references to the accounts defined locally on the firewall.

Starting with PAN-OS 10.2, an administrator needs to configure Cloud Identity Engine to use external authentication services for administrative authentication.

The administrative accounts you define locally on the firewall serve as references to the accounts defined on an external authentication server.

Prior to PAN-OS 10.2, an administrator used the firewall to manage role assignments, but access domains have not been supported by this method.

None

35.

An administrator is required to create an application-based Security policy rule to allow Evernote. The Evernote application implicitly uses SSL and web browsing. What is the minimum the administrator needs to configure in the Security rule to allow only Evernote?

Create an Application Override using TCP ports 443 and 80.

Add the Evernote application to the Security policy rule, then add a second Security policy rule containing both HTTP and SSL.

Add the HTPP, SSL, and Evernote applications to the same Security policy.

Add only the Evernote application to the Security policy rule.

None

36.

An Administrator is configuring Authentication Enforcement and they would like to create an exemption rule to exempt a specific group from authentication. Which authentication enforcement object should they select?

default-browser-challenge

default-no-captive-portal

default-authentication-bypass

default-web-form

None

37.

An engineer needs to collect User-ID mappings from the company's existing proxies. What two methods can be used to pull this data from third party proxies? (Choose two.)

Server Monitoring

Syslog

XFF Headers

Client Probing

38.

The following objects and policies are defined in a device group hierarchy. Dallas-Branch has Dallas-FW as a member of the Dallas-Branch device-group NYC-DC has NYC-FW as a member of the NYC-DC device-group What objects and policies will the Dallas-FW receive if "Share Unused Address and Service Objects" is enabled in Panorama?

Address Objects -Shared Address1 -Shared Address2 -Branch Address1 Policies -Shared Policy1 -Shared Policy2 -Branch Policy1

Address Objects -Shared Address1 -Shared Address2 -Branch Address1 Policies -Shared Policy1 -Branch Policy1

Address Objects -Shared Address1 -Shared Address2 -Branch Address1 -DC Address1 Policies -Shared Policy1 -Shared Policy2 -Branch Policy1

Address Objects -Shared Address1 -Branch Address1 Policies -Shared Policy1 -Branch Policy1

None

39.

An engineer is planning an SSL decryption implementation. Which of the following statements is a best practice for SSL decryption?

Use the same Forward Trust certificate on all firewalls in the network.

Obtain a certificate from a publicly trusted root CA for the Forward Trust certificate.

Use an enterprise CA-signed certificate for the Forward Untrust certificate.

Obtain an enterprise CA-signed certificate for the Forward Trust certificate.

None

40.

To protect your firewall and network from single source denial of service (DoS) attacks that can overwhelm its packet buffer and cause legitimate traffic to drop, you can configure:

PGP (Packet Gateway Protocol)

PBP (Protocol Based Protection)

PBP (Packet Buffer Protection)

BGP (Border Gateway Protocol)

None

41.

What are the two behavior differences between Highlight Unused Rules and the Rule Usage Hit counter when a firewall is rebooted? (Choose two.)

Rule Usage Hit counter will not be reset

Highlight Unused Rules will highlight all rules.

Highlight Unused Rules will highlight zero rules.

Rule Usage Hit counter will reset.

42.

When you import the configuration of an HA pair into Panorama, how do you prevent the import from affecting ongoing traffic?

Disable config Sync

Set the passive link state to 'shutdown'

Disable the HA2 link

Disable HA

None

43.

Given the following snippet of a WildFire submission log. did the end-user get access to the requested information and why or why not?

No because WildFire classified the seventy as "high."

No because WildFire categorized a file with the verdict "malicious"

Yes. because the action is set to "allow ''

Yes because the action is set to "alert"

None

44.

Address Objects -Shared Address1 -Branch Address1 Policies -Shared Policy1 -Branch Policy1

Address Objects -Shared Address1 -Shared Address2 -Branch Address1 -DC Address1 Policies -Shared Policy1 -Shared Policy2 -Branch Policy1

Address Objects -Shared Address1 -Shared Address2 -Branch Address1 Policies -Shared Policy1 -Shared Policy2 -Branch Policy1

Address Objects -Shared Address1 -Shared Address2 -Branch Address1 Policies -Shared Policy1 -Branch Policy1

None

45.

A remote administrator needs access to the firewall on an untrust interface. Which three options would you configure on an Interface Management profile to secure management access? (Choose three.)

User-ID

SSH

Permitted IP address

HTTP

HTTPS

46.

Which Panorama mode should be used so that all logs are sent to, and only stored in Cortex Data Lake?

Legacy

Management Only

Log Collector

Panorama

None

47.

An administrator wants to enable WildFire inline machine learning. Which three file types does WildFire inline ML analyze? (Choose three.)

VBscripts

ELF

MS Office

APK

Powershell scripts

48.

A network administrator is troubleshooting an issue with Phase 2 of an IPSec VPN tunnel. The administrator determines that the lifetime needs to be changed to match the peer. Where should this change be made?

IKE Crypto profile.

IPSec Tunnel settings.

IPSec Crypto profile.

IKE Gateway profile.

None

49.

What are two valid deployment options for Decryption Broker? (Choose two)

Layer 2 Security Chain

Layer 3 Security Chain

Transparent Bridge Security Chain

Transparent Mirror Security Chain

50.

The SSL Forward Proxy decryption policy is configured. The following four certificate authority (CA) certificates are installed on the firewall. An end-user visits the untrusted website https://www.firewall-do-not-trust-website.com. Which certificate authority (CA) certificate will be used to sign the untrusted webserver certificate?

Forward-Trust-Certificate

Firewall-CA

Forward-Untrust-Certificate

Firewall-Trusted-Root-CA

None

51.

The Aggregate Ethernet interface is showing down on a passive PA-7050 firewall of an active/passive HA pair. The HA Passive Link State is set to "Auto" under Device > High Availability > General > Active/Passive Settings. The AE interface is configured with LACP enabled and is up only on the active firewall. Why is the AE interface showing down on the passive firewall?

It does not participate in LACP negotiation unless Fast Failover is selected under the Enable LACP selection on the LACP tab of the AE Interface.

It participates in LACP negotiation when Fast is selected for Transmission Rate under the Enable LACP selection on the LACP tab of the AE Interface.

It performs pre-negotiation of LACP when the mode Passive is selected under the Enable LACP selection on the LACP tab of the AE Interface.

It does not perform pre-negotiation LACP unless "Enable in HA Passive State" is selected under the High Availability Options on the LACP tab of the AE Interface.

None

52.

An administrator notices that an interface configuration has been overridden locally on a firewall. They require an configuration to be managed from Panorama and overrides are not allowed. What is one way the administrator can meet this requirement?

Perform a template commit push from Panorama using the "Force Template Values'' option

Perform a device-group commit push from Panorama using the "Include Device and Network Templates" option.

Perform a commit force from the CLI of the firewall.

Reload the running configuration and perform a Firewall local commit.

None

53.

In an HA failover scenario what occurs when sessions match an SSL Forward Proxy Decryption policy?

HA Sync occurs the session is sent to testpath

HA Sync does not occur the firewall drops the session.

A Sync does not occur the existing session is transferred to the active firewall.

HA Sync occurs the firewall allows the session Put does not decrypt the session.

None

54.

Which CLI command is used to determine how much disk space is allocated to logs?

show system info

show logging-status

debug log-receiver show

show system logdb-quota

None

55.

A firewall has Security policies from three sources: 1. locally created policies 2. shared device group policies as pre-rules 3. the firewall's device group as post-rules. How will the rule order populate once pushed to the firewall?

local policies, firewall device group policies, shared device group policies

shared device group policies, firewall device group policies, local policies

shared device group policies, local policies, firewall device group policies

firewall device group policies, local policies, shared device group policies

None

56.

Which Security Policy Rule configuration option disables antivirus and anti-spyware scanning of server-to-client flows only?

Disable Server Response Inspection

Apply an Application Override

Add server IP Security Policy exception

Disable HIP Profile

None

57.

An administrator needs to troubleshoot a User-ID deployment. The administrator believes that there is an issue related to LDAP authentication. The administrator wants to create a packet capture on the management plane. Which CLI command should the administrator use to obtain the packet capture for validating the configuration?

> scp export pcap from pcap to (username@host:path)

> scp export mgmt-pcap from mgmt.pcap to (username@host:path)

> ftp export mgmt-pcap from mgmt.pcap to

> scp export poap-mgmt from poap.mgmt to (username@host:path)

None

58.

During the process of developing a decryption strategy and evaluating which websites are required for corporate users to access, several sites have been identified that cannot be decrypted due to technical reasons. In this case, the technical reason is unsupported ciphers. Traffic to these sites will therefore be blocked if decrypted How should the engineer proceed?

Add the sites to the SSL Decryption Exclusion list to exempt them from decryption

Create a Security policy to allow access to those sites

Allow the firewall to block the sites to improve the security posture

Install the unsupported cipher into the firewall to allow the sites to be decrypted

None

59.

An engineer must configure a new SSL decryption deployment Which profile or certificate is required before any traffic that matches an SSL decryption rule is decrypted?

There must be a certificate with only the Forward Trust option selected

A Decryption profile must be attached to the Decryption policy that the traffic matches

There must be a certificate with both the Forward Trust option and Forward Untrust option selected

A Decryption profile must be attached to the Security policy that the traffic matches

None

60.

Which configuration is backed up using the Scheduled Config Export feature in Panorama?

Panorama candidate configuration and candidate configuration of all managed devices.

Panorama running configuration and running configuration of all managed devices

Panorama candidate configuration

Panorama running configuration

None

61.

An engineer must configure a new SSL decryption deployment. Which profile or certificate is required before any traffic that matches an SSL decryption rule is decrypted?

There must be a certificate with only the Forward Trust option selected.

A Decryption profile must be attached to the Security policy that the traffic matches.

There must be a certificate with both the Forward Trust option and Forward Untrust option selected.

A Decryption profile must be attached to the Decryption policy that the traffic matches.

None

62.

An administrator is building Security rules within a device group to block traffic to and from malicious locations. How should those rules be configured to ensure that they are evaluated with a high priority?

Create the appropriate rules with a Block action and apply them at the top of the Security Post-Rules

Create the appropriate rules with a Block action and apply them at the top of the Default Rules

Create the appropriate rules with a Block action and apply them at the top of the local firewall Security rules

Create the appropriate rules with a Block action and apply them at the top of the Security Pre-Rules

None

63.

Which function is handled by the management plane (control plane) of a Palo Alto Networks firewall?

logging

Quality of Service

signature matching for content inspection

IPSec tunnel standup

None

64.

An engineer has been tasked with reviewing traffic logs to find applications the firewall is unable to identify with App-ID. Why would the application field display as incomplete?

The client sent a TCP segment with the PUSH flag set.

The TCP connection was terminated without identifying any application data.

There is insufficient application data after the TCP connection was established.

The TCP connection did not fully establish.

None

65.

An administrator has configured a pair of firewalls using high availability in Active/Passive mode. Link and Path Monitoring is enabled with the Failure Condition set to "any". There is one link group configured containing member interfaces ethernet1/1 and ethernet1/2 with a Group Failure Condition set to "all". Which HA state will the Active firewall go into if ethernet1/1 link goes down due to a failure?

Non-functional

Passive

Active

Active-Secondary

None

66.

An administrator plans to deploy 15 firewalls to act as GlobalProtect gateways around the world. Panorama will manage the firewalls. The firewalls will provide access to mobile users and act as edge locations to on-premises infrastructure. The administrator wants to scale the configuration out quickly and wants all of the firewalls to use the same template configuration. Which two solutions can the administrator use to scale this configuration? (Choose two.)

variables

collector groups

virtual systems

template stacks

67.

What are two common reasons to use a "No Decrypt" action to exclude traffic from SSL decryption? (Choose two.)

the web server requires mutual authentication

the website matches a category that is not allowed for most users

the website matches a high-risk category

the website matches a sensitive category

68.

A network administrator wants to use a certificate for the SSL/TLS Service Profile. Which type of certificate should the administrator use?

server certificate

client certificate

certificate authority (CA) certificate

machine certificate

None

69.

Match each type of DoS attack to an example of that type of attack

Application Based Slowris

Volumetric Based UDP Flood Attack

Protocol Based SYN flood Attack

Volumetric Based SYN Flood Attack

70.

When overriding a template configuration locally on a firewall, what should you consider?

Panorama will update the template with the overridden value.

The firewall template will show that it is out of sync within Panorama.

Only Panorama can revert the override.

Panorama will lose visibility into the overridden configuration.

None

71.

A firewall has been assigned to a new template stack that contains both "Global" and "Local" templates in Panorama, and a successful commit and push has been performed. While validating the configuration on the local firewall, the engineer discovers that some settings are not being applied as intended. The setting values from the "Global" template are applied to the firewall instead of the "Local" template that has different values for the same settings. What should be done to ensure that the settings in the "Local" template are applied while maintaining settings from both templates?

Move the "Global" template above the "Local" template in the template stack.

Override the values on the local firewall and apply the correct settings for each value.

Perform a commit and push with the "Force Template Values" option selected.

Move the "Local" template above the "Global" template in the template stack.

None

72.

An administrator creates an application-based security policy rule and commits the change to the firewall. Which two methods should be used to identify the dependent applications for the respective rule? (Choose two.)

Use the show predefined xpath command and review the output.

Reference another application group containing similar applications.

Open the security policy rule and review the Depends On application list.

Review the App Dependency application list from the Commit Status view.

73.

The manager of the network security team has asked you to help configure the company's Security Profiles according to Palo Alto Networks best practice. As part of that effort, the manager has assigned you the Vulnerability Protection profile for the internet gateway firewall. Which action and packet-capture setting for items of high severity and critical severity best matches Palo Alto Networks best practice'?

action 'default' and packet capture 'single-packet'

action 'reset-server' and packet capture 'disable'

action 'reset-both' and packet capture 'single-packet'

action 'reset-both' and packet capture 'extended-capture'

None

74.

When configuring forward error correction (FEC) for PAN-OS SD-WAN, an administrator would turn on the feature inside which type of SD-WAN profile?

Certificate profile

Path Quality profile

SD-WAN interface profile

Traffic Distribution profile

None