Palo Alto Certification Dumps PCNSA Questions

1. DRAG DROP

Match the Palo Alto Networks Security Operating Platform architecture to its description.

2. Which firewall plane provides configuration, logging, and reporting functions on a separate processor?

3. A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base. On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days. Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

4. How many zones can an interface be assigned with a Palo Alto Networks firewall?

5. Which two configuration settings shown are not the default? (Choose two.)

6. Which data-plane processor layer of the graphic shown provides uniform matching for spyware and vulnerability exploits on a Palo Alto Networks Firewall?

7. Which option shows the attributes that are selectable when setting up application filters?

8. Actions can be set for which two items in a URL filtering security profile? (Choose two.)

9. DRAG DROP

Match the Cyber-Attack Lifecycle stage to its correct description.

10. Which two statements are correct about App-ID content updates? (Choose two.)

11. Which User-ID mapping method should be used for an environment with clients that do not authenticate to Windows Active Directory?

12. An administrator needs to allow users to use their own office applications.

How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

13. Which statement is true regarding a Best Practice Assessment?

14. Employees are shown an application block page when they try to access YouTube.

Which security policy is blocking the YouTube application?

15. Complete the statement. A security profile can block or allow traffic.

16. When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?

17. Which interface does not require a MAC or IP address?

18. A company moved its old port-based firewall to a new Palo Alto Networks NGFW 60 days ago.

Which utility should the company use to identify out-of-date or unused rules on the firewall?

19. DRAG DROP

Order the steps needed to create a new security zone with a Palo Alto Networks firewall.

20. What are two differences between an implicit dependency and an explicit dependency in App-ID? (Choose two.)