[2022] Get Top-Rated Palo Alto Networks PCNSA Exam Dumps Now
Passing Key To Getting PCNSA Certified Exam Engine PDF
How to book the PCNSA Exam
These are following steps for registering the Palo Alto Networks PCNSA exam. Step 1: Visit to Pearson VUE Exam Registration Step 2: Signup/Login to Pearson VUE account Step 3: Search for Palo Alto Networks PCNSA Exam Certifications Exam Step 4: Select Date, time and confirm with payment method
NEW QUESTION 86
Which option lists the attributes that are selectable when setting up an Application filters?
- A. Category, Subcategory, Technology, Risk, and Characteristic
- B. Category, Subcategory, Technology, and Characteristic
- C. Name, Category, Technology, Risk, and Characteristic
- D. Category, Subcategory, Risk, Standard Ports, and Technology
Answer: A
NEW QUESTION 87 
Given the topology, which zone type should interface E1/1 be configured with?
- A. Tunnel
- B. Layer3
- C. Tap
- D. Virtual Wire
Answer: C
NEW QUESTION 88
When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?
- A. Translation Type
- B. Interface
- C. IP Address
- D. Address Type
Answer: A
NEW QUESTION 89
Which three statements describe the operation of Security policy rules and Security Profiles? (Choose three.)
- A. Security policy rules can block or allow traffic.
- B. Security Profiles should be used only on allowed traffic.
- C. Security Profiles are attached to Security policy rules.
- D. Security policy rules are attached to Security Profiles.
- E. Security policy rules inspect but do not block traffic.
Answer: B,C,D
NEW QUESTION 90
Given the network diagram, traffic should be permitted for both Trusted and Guest users to access general Internet and DMZ servers using SSH. web-browsing and SSL applications Which policy achieves the desired results?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: D
NEW QUESTION 91
Based on the screenshot what is the purpose of the included groups?
- A. They contain only the users you allow to manage the firewall.
- B. They are used to map usernames to group names.
- C. They are groups that are imported from RADIUS authentication servers.
- D. They are only groups visible based on the firewall's credentials.
Answer: B
NEW QUESTION 92
In the example security policy shown, which two websites would be blocked? (Choose two.)
- A. YouTube
- B. LinkedIn
- C. Amazon
- D. Facebook
Answer: B,D
NEW QUESTION 93
You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?
- A. Admin Role profile
- B. virtual router
- C. DNS proxy
- D. service route
Answer: C
NEW QUESTION 94
When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?
- A. Translation Type
- B. Interface
- C. IP Address
- D. Address Type
Answer: A
NEW QUESTION 95
Order the steps needed to create a new security zone with a Palo Alto Networks firewall.
Answer:
Explanation:
Explanation
Step 1 - Select network tab
Step 2 - Select zones from the list of available items
Step 3 - Select Add
Step 4 - Specify Zone Name
Step 5 - Specify Zone Type
Step 6 - Assign interfaces as needed
NEW QUESTION 96
Which rule type is appropriate for matching traffic both within and between the source and destination zones?
- A. universal
- B. interzone
- C. shadowed
- D. intrazone
Answer: B
NEW QUESTION 97
Which action results in the firewall blocking network traffic with out notifying the sender?
- A. Reset Server
- B. Reset Client
- C. Deny
- D. Drop
Answer: D
NEW QUESTION 98
Given the image, which two options are true about the Security policy rules. (Choose two.)
- A. In the Allow Social Networking rule, allows all of Facebook's functions
- B. The Allow Office Programs rule is using an Application Filter
- C. The Allow Office Programs rule is using an Application Group
- D. In the Allow FTP to web server rule, FTP is allowed using App-ID
Answer: C,D
NEW QUESTION 99
Given the topology, which zone type should zone A and zone B to be configured with?
- A. Tap
- B. Layer2
- C. Layer3
- D. Virtual Wire
Answer: C
NEW QUESTION 100
How frequently can wildfire updates be made available to firewalls?
- A. every 30 minutes
- B. every 5 minutes
- C. every 60 minutes
- D. every 15 minutes
Answer: B
NEW QUESTION 101
Which two App-ID applications will you need to allow in your Security policy to use facebook-chat? (Choose two.)
- A. facebook-email
- B. facebook
- C. facebook-chat
- D. facebook-base
Answer: C,D
Explanation:
Explanation/Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClV0CAK
NEW QUESTION 102
Which security profile will provide the best protection against ICMP floods, based on individual combinations of a packet`s source and destination IP address?
- A. URL filtering
- B. packet buffering
- C. anti-spyware
- D. DoS protection
Answer: D
NEW QUESTION 103
Which two configuration settings shown are not the default? (Choose two.)
- A. Enable Probing
- B. Enable Session
- C. Enable Security Log
- D. Server Log Monitor Frequency (sec)
Answer: B,D
Explanation:
References:
NEW QUESTION 104
Which administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact and command-and-control (C2) server.
Which security profile components will detect and prevent this threat after the firewall`s signature database has been updated?
- A. data filtering profile applied to inbound security policies
- B. vulnerability profile applied to inbound security policies
- C. data filtering profile applied to outbound security policies
- D. antivirus profile applied to outbound security policies
Answer: C
NEW QUESTION 105
Match the Cyber-Attack Lifecycle stage to its correct description.
Answer:
Explanation:
Explanation
Reconnaissance - stage where the attacker scans for network vulnerabilities and services that can be exploited.
Installation - stage where the attacker will explore methods such as a root kit to establish persistence Command and Control - stage where the attacker has access to a specific server so they can communicate and pass data to and from infected devices within a network.
Act on the Objective - stage where an attacker has motivation for attacking a network to deface web property
NEW QUESTION 106
Which Security Profile can provide protection against ICMP floods, based on individual combinations of a packet's source and destination IP addresses?
- A. URL filtering
- B. packet buffering
- C. anti-spyware
- D. DoS protection
Answer: D
NEW QUESTION 107
......
PCNSA exam questions for practice in 2022 Updated 170 Questions: https://validtorrent.prep4pass.com/PCNSA_exam-braindumps.html
