Verified PCNSA Dumps Q&As - PCNSA Test Engine with Correct Answers [Q91-Q105]

Rate this post

Verified PCNSA Dumps Q&As – PCNSA Test Engine with Correct Answers

Pass Your PCNSA Dumps as PDF Updated on 2024 With 293 Questions

The PCNSA certification exam covers a range of topics related to Palo Alto Networks next-generation firewalls, including firewall configuration, network security management, and troubleshooting. PCNSA exam is designed to test the candidate’s understanding of core concepts, best practices, and techniques used to secure a network with Palo Alto Networks firewalls. PCNSA exam consists of 60 multiple-choice questions and is timed at 90 minutes. Passing the PCNSA certification exam requires a score of 70% or higher. Achieving this certification demonstrates a high level of expertise in network security administration using Palo Alto Networks firewalls.

NO.91 An administrator would like to override the default deny action for a given application and instead would like to block the traffic and send the ICMP code “communication with the destination is administratively prohibited” Which security policy action causes this?

Drop

Drop, send ICMP Unreachable

Reset both

Reset server

NO.92 Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.

Exploitation

Installation

Reconnaissance

Act on Objective

NO.93 Your company occupies one floor in a single building you have two active directory domain controllers on a single networks the firewall s management plane is only slightly utilized.
Which user-ID agent sufficient in your network?

PAN-OS integrated agent deployed on the firewall

Windows-based agent deployed on the internal network a domain member

Citrix terminal server agent deployed on the network

Windows-based agent deployed on each domain controller

NO.94 Drag and Drop Question
Drag the steps into the correct order to create a static route.

NO.95 An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated? (Choose two.)

vulnerability protection profile applied to outbound security policies

anti-spyware profile applied to outbound security policies

antivirus profile applied to outbound security policies

URL filtering profile applied to outbound security policies

NO.96 An administrator is reviewing another administrator s Security policy log settings.
Which log setting configuration is consistent with best practices tor normal traffic?

Log at Session Start and Log at Session End both enabled

Log at Session Start disabled Log at Session End enabled

Log at Session Start enabled Log at Session End disabled

Log at Session Start and Log at Session End both disabled

NO.97 When is the content inspection performed in the packet flow process?

after the application has been identified

after the SSL Proxy re-encrypts the packet

before the packet forwarding process

before session lookup

NO.98 Match the network device with the correct User-ID technology.

NO.99 Actions can be set for which two items in a URL filtering security profile? (Choose two.)

Block List

Custom URL Categories

PAN-DB URL Categories

Allow List
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/url-filtering-concepts/url-filtering-profile-actions

NO.100 An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory

Create an Application Group and add business-systems to it

Create an Application Filter and name it Office Programs, then filter it on the business-systems category

Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office

NO.101 Arrange the correct order that the URL classifications are processed within the system.

NO.102 Arrange the correct order that the URL classifications are processed within the system.

NO.103 Which three onfiguration settings are required on a Palo Alto networks firewall management interface?

default gateway

netmask

IP address

hostname

auto-negotiation

NO.104 What is the function of an application group object?

It contains applications that you want to treat similarly in policy

It groups applications dynamically based on application attributes that you define

It represents specific ports and protocols for an application

It identifies the purpose of a rule or configuration object and helps you better organize your rulebase

NO.105 What is considered best practice with regards to committing configuration changes?

Disable the automatic commit feature that prioritizes content database installations before committing

Validate configuration changes prior to committing

Wait until all running and pending jobs are finished before committing

Export configuration after each single configuration change performed

Pass Palo Alto Networks PCNSA Exam Info and Free Practice Test: https://www.pdf4test.com/PCNSA-dump-torrent.html

Free certification test prep

Verified PCNSA Dumps Q&As – PCNSA Test Engine with Correct Answers [Q91-Q105]

Leave a Reply Cancel reply