New Updated Palo Alto Networks PCNSA Exam Guides

dumps2022-02-10T03:56:45+08:00

Palo Alto Networks PCNSA exam guides have been updated, which can help you study the related topics. With all of the updated Palo Alto Networks PCNSA exam guides, you can pass the test in a short time. Free updated Palo Alto Networks PCNSA exam guides are below.

Page 1 of 3

1. create a service account on the Domain Controller with sufficient permissions to execute the User- ID agent

2-3-4-1

1-4-3-2

3-1-2-4

1-3-2-4

2. You receive notification about new malware that is being used to attack hosts The malware exploits a software bug in a common application

Which Security Profile detects and blocks access to this threat after you update the firewall's threat signature database?

Data Filtering Profile applied to outbound Security policy rules

Antivirus Profile applied to outbound Security policy rules

Data Filtering Profile applied to inbound Security policy rules

Vulnerability Profile applied to inbound Security policy rules

3. Based on the screenshot presented which column contains the link that when clicked opens a window to display all applications matched to the policy rule?

Apps Allowed

Name

Apps Seen

Service

4. What is the main function of Policy Optimizer?

reduce load on the management plane by highlighting combinable security rules

migrate other firewall vendors’ security rules to Palo Alto Networks configuration

eliminate “Log at Session Start” security rules

convert port-based security rules to application-based security rules

5. The PowerBall Lottery has reached an unusually high value this week. Your company has decided to raise morale by allowing employees to access the PowerBall Lottery website (www.powerball.com) for just this week. However, the company does not want employees to access any other websites also listed in the URL filtering “gambling” category.

Which method allows the employees to access the PowerBall Lottery website but without unblocking access to the “gambling” URL category?

Add just the URL www.powerball.com to a Security policy allow rule.

Manually remove powerball.com from the gambling URL category.

Add *.powerball.com to the URL Filtering allow list.

Create a custom URL category, add *.powerball.com to it and allow it in the Security Profile.

6. Which three configuration settings are required on a Palo Alto networks firewall management interface?

default gateway

netmask

IP address

hostname

auto-negotiation

7. A Security Profile can block or allow traffic at which point?

after it is matched to a Security policy rule that allows traffic

on either the data plane or the management plane

after it is matched to a Security policy rule that allows or blocks traffic

before it is matched to a Security policy rule

8. How often does WildFire release dynamic updates?

every 5 minutes

every 15 minutes

every 60 minutes

every 30 minutes

9. Starting with PAN_OS version 9.1 which new type of object is supported for use within the user field of a security policy rule?

local username

dynamic user group

remote username

static user group

10. An administrator wishes to follow best practices for logging traffic that traverses the firewall

Which log setting is correct?

Disable all logging

Enable Log at Session End

Enable Log at Session Start

Enable Log at both Session Start and End

Page 2 of 3

11. Which definition describes the guiding principle of the zero-trust architecture?

never trust, never connect

always connect and verify

never trust, always verify

trust, but verity

12. How are Application Fillers or Application Groups used in firewall policy?

An Application Filter is a static way of grouping applications and can be configured as a nested member of an Application Group

An Application Filter is a dynamic way to group applications and can be configured as a nested member of an Application Group

An Application Group is a dynamic way of grouping applications and can be configured as a nested member of an Application Group

An Application Group is a static way of grouping applications and cannot be configured as a nested member of Application Group

13. Which Palo Alto network security operating platform component provides consolidated policy creation and centralized management?

Prisma SaaS

Panorama

AutoFocus

GlobalProtect

14. What is an advantage for using application tags?

They are helpful during the creation of new zones

They help with the design of IP address allocations in DHC

They help content updates automate policy updates

They help with the creation of interfaces

15. Which action results in the firewall blocking network traffic without notifying the sender?

Deny

No notification

Drop

Reset Client

16. Recently changes were made to the firewall to optimize the policies and the security team wants to see if those changes are helping.

What is the quickest way to reset the hit counter to zero in all the security policy rules?

At the CLI enter the command reset rules and press Enter

Highlight a rule and use the Reset Rule Hit Counter > Selected Rules for each rule

Reboot the firewall

Use the Reset Rule Hit Counter > All Rules option

17. To use Active Directory to authenticate administrators, which server profile is required in the authentication profile?

domain controller

TACACS+

LDAP

RADIUS

18. How frequently can wildfire updates be made available to firewalls?

every 15 minutes

every 30 minutes

every 60 minutes

every 5 minutes

19. What can be achieved by selecting a policy target prior to pushing policy rules from Panorama?

Doing so limits the templates that receive the policy rules

Doing so provides audit information prior to making changes for selected policy rules

You can specify the firewalls m a device group to which to push policy rules

You specify the location as pre can - or post-rules to push policy rules

20. DRAG DROP

Match the Palo Alto Networks Security Operating Platform architecture to its description.

Page 3 of 3

21. DRAG DROP

Place the steps in the correct packet-processing order of operations.

22. An administrator would like to override the default deny action for a given application and instead would like to block the traffic and send the ICMP code "communication with the destination is administratively prohibited"

Which security policy action causes this?

Drop

Drop, send ICMP Unreachable

Reset both

Reset server

23. Which URL profiling action does not generate a log entry when a user attempts to access that URL?

Override

Allow

Block

Continue

24. What action will inform end users when their access to Internet content is being restricted?

Create a custom 'URL Category' object with notifications enabled.

Publish monitoring data for Security policy deny logs.

Ensure that the 'site access" setting for all URL sites is set to 'alert'.

Enable 'Response Pages' on the interface providing Internet access.

New Updated Palo Alto Networks PCNSA Exam Guides

New Updated Palo Alto Networks PCNSA Exam Guides

Share this post

Leave a Reply Cancel reply

Related Posts