Get 100% Passing Success With True PCNSA Exam! [Sep-2021]
Palo Alto Networks PCNSA PDF Questions - Exceptional Practice To Palo Alto Networks Certified Network Security Administrator
NEW QUESTION 88
When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?
- A. IP Address
- B. Interface
- C. Address Type
- D. Translation Type
Answer: D
NEW QUESTION 89
How many zones can an interface be assigned with a Palo Alto Networks firewall?
- A. one
- B. two
- C. three
- D. four
Answer: A
Explanation:
References:
NEW QUESTION 90
Which update option is not available to administrators?
- A. New Antivirus Signatures
- B. New Spyware Notifications
- C. New Application Signatures
- D. New URLs
- E. New Malicious Domains
Answer: D
NEW QUESTION 91
Which two security profile types can be attached to a security policy? (Choose two.)
- A. threat
- B. antivirus
- C. vulnerability
- D. DDoS protection
Answer: B,C
Explanation:
References:
NEW QUESTION 92
Which security profile will provide the best protection against ICMP floods, based on individual combinations of a packet`s source and destination IP address?
- A. packet buffering
- B. anti-spyware
- C. DoS protection
- D. URL filtering
Answer: C
NEW QUESTION 93
Which Palo Alto Networks service protects cloud-based applications such as Dropbox and Salesforce by monitoring permissions and shares and scanning files for sensitive information?
- A. Panorama
- B. GlobalProtect
- C. AutoFocus
- D. Prisma SaaS
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 94
Which two configuration settings shown are not the default? (Choose two.)
- A. Enable Probing
- B. Enable Session
- C. Enable Security Log
- D. Server Log Monitor Frequency (sec)
Answer: B,D
Explanation:
Explanation
References:
NEW QUESTION 95
What do dynamic user groups you to do?
- A. create a policy that provides auto-sizing for anomalous user behavior and malicious activity
- B. create a QoS policy that provides auto-remediation for anomalous user behavior and malicious activity
- C. create a dynamic list of firewall administrators
- D. create a policy that provides auto-remediation for anomalous user behavior and malicious activity
Answer: C
NEW QUESTION 96
Which URL profiling action does not generate a log entry when a user attempts to access that URL?
- A. Override
- B. Block
- C. Continue
- D. Allow
Answer: D
NEW QUESTION 97
An administrator notices that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would the administrator need to monitor and block to mitigate the malicious activity?
- A. perimeter traffic
- B. branch office traffic
- C. north-south traffic
- D. east-west traffic
Answer: D
NEW QUESTION 98
Four configuration choices are listed, and each could be used to block access to a specific URL. If you configured each choices to block the sameURL then which choice would be the last to block access to the URL?
- A. EDL in URL Filtering Profile.
- B. Custom URL category in Security Policy rule.
- C. PAN-DB URL category in URL Filtering Profile.
- D. Custom URL category in URL Filtering Profile.
Answer: A
NEW QUESTION 99
What is the minimum timeframe that can be set on the firewall to check for new WildFire signatures?
- A. every 1 minute
- B. every 5 minutes
- C. every 30 minutes
- D. once every 24 hours
Answer: A
NEW QUESTION 100
An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?
- A. Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory
- B. Create an Application Group and add business-systems to it
- C. Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office
- D. Create an Application Filter and name it Office Programs, then filter it on the business-systems category
Answer: A
Explanation:
An application filter is an object that dynamically groups applications based on application attributes that you define, including category, subcategory, technology, risk factor, and characteristic. This is useful when you want to safely enable access to applications that you do not explicitly sanction, but that you want users to be able to access. For example, you may want to enable employees to choose their own office programs (such as Evernote, Google Docs, or Microsoft Office 365) for business use. To safely enable these types of applications, you could create an application filter that matches on the Category business-systems and the Subcategory office-programs. As new applications office programs emerge and new App-IDs get created, these new applications will automatically match the filter you defined; you will not have to make any additional changes to your policy rulebase to safely enable any application that matches the attributes you defined for the filter.
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/use-application-objects-in -policy/create-an-application-filter.html
NEW QUESTION 101
Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?
- A. Review Policies
- B. Review Apps
- C. Pre-analyze
- D. Review App Matches
Answer: A
NEW QUESTION 102
An internal host wants to connect to servers of the internet through using source NAT.
Which policy is required to enable source NAT on the firewall?
- A. NAT policy with no source of destination zone selected
- B. post-NAT policy with external source and any destination address
- C. pre-NAT policy with external source and any destination address
- D. NAT policy with source zone and destination zone specified
Answer: D
Explanation:
Explanation
NEW QUESTION 103
......
PCNSA dumps - TestsDumps - 100% Passing Guarantee: https://www.testsdumps.com/PCNSA_real-exam-dumps.html
Fast, Hands-On PCNSA exam: https://drive.google.com/open?id=1dFs1Z3VW-LAFvlK9cMI3AZzKszPT_scF
