exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 96 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 96
Topic #: 1
[All PCNSE Questions]

Which two methods can be used to verify firewall connectivity to AutoFocus? (Choose two.)

  • A. Verify AutoFocus status using the CLI ג€testג€ command.
  • B. Check the WebUI Dashboard AutoFocus widget.
  • C. Check for WildFire forwarding logs.
  • D. Check the license.
  • E. Verify AutoFocus is enabled below Device Management tab.
Show Suggested Answer Hide Answer
Suggested Answer: DE 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ja_girl_eng
1 week, 1 day ago
Selected Answer: AB
Simply checking license does not verify connectivity and checking autofocus is enabled doesn’t verify connectivity. Only the CLI (test autofocus connectivity) and the Autofocus widget actually test connectivity
upvoted 1 times
...
fixboz
3 months, 2 weeks ago
Selected Answer: AB
the only two way to check connectivity
upvoted 1 times
...
jeremykebir
6 months, 3 weeks ago
Sorry to all of you, but only A & B check the well connectivity with Auto Focus :) Good luck
upvoted 1 times
...
Marshpillowz
11 months, 3 weeks ago
Selected Answer: DE
D and E appear to be correct
upvoted 1 times
...
secdaddy
2 years, 3 months ago
A seems possible if one has the destination IP information but would only check L3/L4 Why not B? For example the autofocus dashboard alerts widget which presumably wouldn't have any alerts if the firewall were not connected to autofocus? https://docs.paloaltonetworks.com/autofocus/autofocus-admin/autofocus-alerts/view-alerts-in-autofocus#id988b3d9f-7526-4ec6-9ece-e7e4e70b6156 C these logs are presumably not visible to us as they're PAN cloud to PAN cloud? D seems this would only confirm firewall to portal connectivity for license activation E doesn't check connectivity Overall a poorly worded question. I agree DE are steps to connecting and are maybe best but maybe AB are possible to actually 'verify connectivity' ?
upvoted 3 times
Knowledge33
1 year, 7 months ago
license is the most important. You can't use AutoFocus without license.
upvoted 1 times
...
...
TAKUM1y
2 years, 3 months ago
Selected Answer: DE
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/threat-prevention/learn-more-about-and-assess-threats/assess-firewall-artifacts-with-autofocus/enable-autofocus-threat-intelligence#id9ac4f191-abbf-4483-8a43-57bc137038ce
upvoted 2 times
...
GivemeMoney
2 years, 12 months ago
Seems this question may be outdated https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/threat-prevention/learn-more-about-and-assess-threats/assess-firewall-artifacts-with-autofocus/enable-autofocus-threat-intelligence.html steps 1 and 2 describe D and E to enable autofocus. steps 4 is the answer: "Test the connection between the firewall and AutoFocus.: -On the firewall, select Monitor>Logs>Traffic. -Verify that you can Assess Firewall Artifacts with AutoFocus." But no answers to select for those...
upvoted 3 times
...
fatespb
3 years, 4 months ago
I would prefer A and E.
upvoted 2 times
Elvenking
2 years, 9 months ago
test commands are used to verify whether a particular traffic would pass, get blocked or finally how it would be recognized by the firewall. I think "test' would a last resort and out of scope.
upvoted 1 times
...
...
jordan_gsi
3 years, 9 months ago
DE https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/learn-more-about-and-assess-threats/assess-firewall-artifacts-with-autofocus/enable-autofocus-threat-intelligence.html
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago