Get all the Information About Palo Alto Networks PCNSA Exam 2023 Practice Test Questions
Check Real Palo Alto Networks PCNSA Exam Question for Free (2023)
NEW QUESTION 29
What are the two default behaviors for the intrazone-default policy? (Choose two.)
- A. Deny
- B. Allow
- C. Logging disabled
- D. Log at Session End
Answer: B,D
NEW QUESTION 30
Drag and Drop Question
Place the steps in the correct packet-processing order of operations.
Select and Place:
Answer:
Explanation:
NEW QUESTION 31
Match the Cyber-Attack Lifecycle stage to its correct description.
Answer:
Explanation:
NEW QUESTION 32
Match the Palo Alto Networks Security Operating Platform architecture to its description.
Answer:
Explanation:
NEW QUESTION 33
Actions can be set for which two items in a URL filtering security profile? (Choose two.)
- A. Custom URL Categories
- B. Allow List
- C. PAN-DB URL Categories
- D. Block List
Answer: A,C
Explanation:
Explanation
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boO3CAI
NEW QUESTION 34
What two authentication methods on the Palo Alto Networks firewalls support authentication and authorization for role-based access control? (Choose two.)
- A. TACACS+
- B. LDAP
- C. SAML
- D. Kerberos
Answer: A,C
NEW QUESTION 35
Complete the statement. A security profile can block or allow traffic
- A. after it is evaluated by a security policy that allows or blocks traffic
- B. before it is evaluated by a security policy
- C. on unknown-tcp or unknown-udp traffic
- D. after it is evaluated by a security policy that allows traffic
Answer: D
Explanation:
Security profiles are objects added to policy rules that are configured with an action of allow.
NEW QUESTION 36
You receive notification about new malware that infects hosts through malicious files transferred by FTP.
Which Security profile detects and protects your internal networks from this threat after you update your firewall's threat signature database?
- A. Antivirus profile applied to inbound Security policy rules.
- B. URL Filtering profile applied to inbound Security policy rules.
- C. Data Filtering profile applied to outbound Security policy rules.
- D. Vulnerability Protection profile applied to outbound Security policy rules.
Answer: A
NEW QUESTION 37
What must be configured for the firewall to access multiple authentication profiles for external services to authenticate a non-local account?
- A. authentication sequence
- B. LDAP server profile
- C. authentication list profile
- D. authentication server list
Answer: A
Explanation:
References:
NEW QUESTION 38
Match the Cyber-Attack Lifecycle stage to its correct description.
Answer:
Explanation:
Explanation
Reconnaissance - stage where the attacker scans for network vulnerabilities and services that can be exploited.
Installation - stage where the attacker will explore methods such as a root kit to establish persistence Command and Control - stage where the attacker has access to a specific server so they can communicate and pass data to and from infected devices within a network.
Act on the Objective - stage where an attacker has motivation for attacking a network to deface web property
NEW QUESTION 39
Given the cyber-attack lifecycle diagram identify the stage in which the attacker can run malicious code against a vulnerability in a targeted machine.
- A. Exploitation
- B. Act on the Objective
- C. Reconnaissance
- D. Installation
Answer: A
NEW QUESTION 40
What do you configure if you want to set up a group of objects based on their ports alone?
- A. Application groups
- B. Service groups
- C. Custom objects
- D. Address groups
Answer: B
NEW QUESTION 41
Which protocol is used to map usernames to user groups when User-ID is configured?
- A. TACACS+
- B. LDAP
- C. RADIUS
- D. SAML
Answer: B
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/user-id/map-users-to-groups.html
NEW QUESTION 42
Your company occupies one floor in a single building you have two active directory domain controllers on a single networks the firewall s management plane is only slightly utilized.
Which user-ID agent sufficient in your network?
- A. Windows-based agent deployed on each domain controller
- B. Citrix terminal server agent deployed on the network
- C. Windows-based agent deployed on the internal network a domain member
- D. PAN-OS integrated agent deployed on the firewall
Answer: D
NEW QUESTION 43
URL categories can be used as match criteria on which two policy types? (Choose two.)
- A. authentication
- B. decryption
C application override - C. NAT
Answer: A,B
NEW QUESTION 44
An administrator would like to see the traffic that matches the interzone-default rule in the traffic logs.
What is the correct process to enable this logging1?
- A. Select the interzone-default rule and edit the rule on the Actions tab select Log at Session Start and click OK
- B. Select the interzone-default rule and edit the rule on the Actions tab select Log at Session End and click OK
- C. Select the interzone-default rule and click Override on the Actions tab select Log at Session End and click OK
- D. This rule has traffic logging enabled by default no further action is required
Answer: C
NEW QUESTION 45
Drag and Drop Question
Place the following steps in the packet processing order of operations from first to last.
Select and Place:
Answer:
Explanation:
NEW QUESTION 46
Which two rule types allow the administrator to modify the destination zone? (Choose two )
- A. universal
- B. shadowed
- C. intrazone
- D. interzone
Answer: A,D
NEW QUESTION 47
In which profile should you configure the DNS Security feature?
- A. URL Filtering Profile
- B. Zone Protection Profile
- C. Antivirus Profile
- D. Anti-Spyware Profile
Answer: D
NEW QUESTION 48
Which data-plane processor layer of the graphic shown provides uniform matching for spyware and vulnerability exploits on a Palo Alto Networks Firewall?
- A. Security Processing
- B. Network Processing
- C. Signature Matching
- D. Security Matching
Answer: C
NEW QUESTION 49
Which type of security policy rule will match traffic that flows between the Outside zone and inside zone, but would not match traffic that flows within the zones?
- A. global
- B. intrazone
- C. universal
- D. interzone
Answer: D
Explanation:
Reference:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/software-and-content-updates/dynamic- contentupdates.html#:~:text=WildFire%20signature%20updates%20are%20made,within%20a%20minute%20of %
20availability
NEW QUESTION 50
An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall's signature database has been updated?
(Choose two.)
- A. vulnerability protection profile applied to outbound security policies
- B. antivirus profile applied to outbound security policies
- C. anti-spyware profile applied to outbound security policies
- D. URL filtering profile applied to outbound security policies
Answer: C,D
Explanation:
Explanation/Reference:
Reference: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/policy/create-best-practice- security-profiles
NEW QUESTION 51
Match the network device with the correct User-ID technology.
Answer:
Explanation:
Explanation:
Microsoft Exchange - Server monitoring
Linux authentication - syslog monitoring
Windows Client - client probing
Citrix client - Terminal Services agent
NEW QUESTION 52
An administrator is reviewing another administrator s Security policy log settings.
Which log setting configuration is consistent with best practices tor normal traffic?
- A. Log at Session Start disabled Log at Session End enabled
- B. Log at Session Start enabled Log at Session End disabled
- C. Log at Session Start and Log at Session End both enabled
- D. Log at Session Start and Log at Session End both disabled
Answer: A
NEW QUESTION 53
Access to which feature requires the PAN-OS Filtering license?
- A. URL external dynamic lists
- B. PAN-DB database
- C. DNS Security
- D. Custom URL categories
Answer: B
NEW QUESTION 54
......
Use Free PCNSA Exam Questions that Stimulates Actual EXAM : https://www.free4torrent.com/PCNSA-braindumps-torrent.html
Get Ready to Boost your Prepare for your PCNSA Exam with 284 Questions: https://drive.google.com/open?id=1CRKpBzpqZ3fRV0sLWysdNqPNZcp0BSmC