Learn Palo Alto Networks PCNSA Updated Dumps Questions [2022] To Pass PCNSA Exam

1. Complete the statement. A security profile can block or allow traffic____________

2. Which license must an administrator acquire prior to downloading Antivirus updates for use with the firewall?

3. An administrator would like to see the traffic that matches the interzone-default rule in the traffic logs.

What is the correct process to enable this logging1?

4. At which stage of the cyber-attack lifecycle would the attacker attach an infected PDF file to an email?

5. Which statements is true regarding a Heatmap report?

6. You need to allow users to access the officeCsuite application of their choice .

How should you configure the firewall to allow access to any office-suite application?

7. Four configuration choices are listed, and each could be used to block access to a specific URL.

If you configured each choices to block the same URL then which choice would be the last to block access to the URL?

8. Which type of address object is "10 5 1 1/0 127 248 2"?

9. Based on the graphic, what is the purpose of the SSL/TLS Service profile configuration option?

10. Which two firewall components enable you to configure SYN flood protection thresholds? (Choose two.)

11. Which Palo Alto networks security operating platform service protects cloud-based application such as Dropbox and salesforce by monitoring permissions and shared and scanning files for Sensitive information?

12. You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?

13. When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?

14. Which security profile will provide the best protection against ICMP floods, based on individual combinations of a packet`s source and destination IP address?

15. Which two security profile types can be attached to a security policy? (Choose two.)

16. Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

17. Which type of security rule will match traffic between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?

18. A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future Public Cloud environments. All other required connections have already been enabled between the USERS- and the OUTSIDE-zone .

What configuration-changes should the Firewall-admin make?

19. The Palo Alto Networks NGFW was configured with a single virtual router named VR-1 What changes are required on VR-1 to route traffic between two interfaces on the NGFW?

20. Which two statements are true for the DNS security service introduced in PAN-OS version 10.0?

21. Which option is part of the content inspection process?

22. Which two Palo Alto Networks security management tools provide a consolidated creation of policies, centralized management and centralized threat intelligence. (Choose two.)

23. Which protocol used to map username to user groups when user-ID is configured?

24. All users from the internal zone must be allowed only Telnet access to a server in the DMZ zone. Complete the two empty fields in the Security Policy rules that permits only this type of access.

Source Zone: Internal

Destination Zone: DMZ Zone

Application: _________?

Service: ____________?

Action: allow

(Choose two.)

25. Which Security profile would you apply to identify infected hosts on the protected network using DNS traffic?

26. DRAG DROP

Arrange the correct order that the URL classifications are processed within the system.

27. Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)

28. Which object would an administrator create to block access to all high-risk applications?

29. Based on the security policy rules shown, ssh will be allowed on which port?

30. Access to which feature requires the PAN-OS Filtering license?

31. Which Palo Alto Networks firewall security platform provides network security for mobile endpoints by inspecting traffic deployed as internet gateways?

32. At which point in the app-ID update process can you determine if an existing policy rule is affected by an app-ID update?

33. Which operations are allowed when working with App-ID application tags?

34. When is the content inspection performed in the packet flow process?

35. Given the scenario, which two statements are correct regarding multiple static default routes? (Choose two.)

36. Which two configuration settings shown are not the default? (Choose two.)

37. Actions can be set for which two items in a URL filtering security profile? (Choose two.)

38. What are two differences between an implicit dependency and an explicit dependency in App-ID? (Choose two.)

39. Which option lists the attributes that are selectable when setting up an Application filters?

40. How does an administrator schedule an Applications and Threats dynamic update while delaying installation of the update for a certain amount of time?

41. Which statement is true regarding a Prevention Posture Assessment?

42. Which the app-ID application will you need to allow in your security policy to use facebook-chat?

43. Which path is used to save and load a configuration with a Palo Alto Networks firewall?

44. What is a recommended consideration when deploying content updates to the firewall from Panorama?

45. Which firewall plane provides configuration, logging, and reporting functions on a separate processor?

46. Your company occupies one floor in a single building you have two active directory domain controllers on a single networks the firewall s management plane is only slightly utilized.

Which user-ID agent sufficient in your network?

47. An administrator is reviewing another administrator s Security policy log settings

Which log setting configuration is consistent with best practices tor normal traffic?

48. Which rule type is appropriate for matching traffic both within and between the source and destination zones?

49. Which two statements are correct about App-ID content updates? (Choose two.)

50. What is the main function of the Test Policy Match function?