Prepare Top Palo Alto Networks PCNSA Exam Study Guide Practice Questions Edition [Q90-Q114]

5/5 - (2 votes)

Prepare Top Palo Alto Networks PCNSA Exam Study Guide Practice Questions Edition

Go to PCNSA Questions – Try PCNSA dumps pdf

NO.90 Based on the screenshot presented which column contains the link that when clicked opens a window to display all applications matched to the policy rule?

Apps Allowed

Name

Apps Seen

Service

NO.91 Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can run malicious code against a targeted machine.

Exploitation

Installation

Reconnaissance

Act on Objective

NO.92 Match the cyber-attack lifecycle stage to its correct description.

NO.93 Given the topology, which zone type should zone A and zone B to be configured with?

Layer3

Tap

Layer2

Virtual Wire

NO.94 Actions can be set for which two items in a URL filtering security profile? (Choose two.)

Block List

Custom URL Categories

PAN-DB URL Categories

Allow List
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/url-filtering-concepts/url-filtering-profile-actions

NO.95 Which URL Filtering Profile action does not generate a log entry when a user attempts to access a URL?

Override

Allow

Block

Continue

NO.96 Based on the graphic which statement accurately describes the output shown in the server monitoring panel?

The User-ID agent is connected to a domain controller labeled lab-client.

The host lab-client has been found by the User-ID agent.

The host lab-client has been found by a domain controller.

The User-ID agent is connected to the firewall labeled lab-client.

NO.97 An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory

Create an Application Group and add business-systems to it

Create an Application Filter and name it Office Programs, then filter it on the business-systems category

Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office An application filter is an object that dynamically groups applications based on application attributes that you define, including category, subcategory, technology, risk factor, and characteristic. This is useful when you want to safely enable access to applications that you do not explicitly sanction, but that you want users to be able to access. For example, you may want to enable employees to choose their own office programs (such as Evernote, Google Docs, or Microsoft Office 365) for business use. To safely enable these types of applications, you could create an application filter that matches on the Category business-systems and the Subcategory office-programs. As new applications office programs emerge and new App-IDs get created, these new applications will automatically match the filter you defined; you will not have to make any additional changes to your policy rulebase to safely enable any application that matches the attributes you defined for the filter.

NO.98 Match the network device with the correct User-ID technology.

NO.99 Which plane on a Palo alto networks firewall provides configuration logging and reporting functions on a separate processor?

data

network processing

management

security processing

NO.100 Match the network device with the correct User-ID technology.

NO.101 Match the network device with the correct User-ID technology.

NO.102 Which path is used to save and load a configuration with a Palo Alto Networks firewall?

Device>Setup>Services

Device>Setup>Management

Device>Setup>Operations

Device>Setup>Interfaces

NO.103 Which link in the web interface enables a security administrator to view the security policy rules that match new application signatures?

Review Apps

Review App Matches

Pre-analyze

Review Policies

NO.104 Selecting the option to revert firewall changes will replace what settings?

the running configuration with settings from the candidate configuration

the device state with settings from another configuration

the candidate configuration with settings from the running configuration

dynamic update scheduler settings

NO.105 Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?

Review Policies

Review Apps

Pre-analyze

Review App Matches

NO.106 Starting with PAN-OS version 9.1, application dependency information is now reported in which two locations? (Choose two.)

on the App Dependency tab in the Commit Status window

on the Policy Optimizer’s Rule Usage page
C on the Application tab in the Security Policy Rule creation window

on the Objects > Applications browser pages

NO.107 Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

intrazone-default

Deny Google

allowed-security services

interzone-default

NO.108 Which User-ID mapping method should be used for an environment with clients that do not authenticate to Windows Active Directory?

Windows session monitoring via a domain controller

passive server monitoring using the Windows-based agent

Captive Portal

passive server monitoring using a PAN-OS integrated User-ID agent

NO.109 Match each feature to the DoS Protection Policy or the DoS Protection Profile.

NO.110 Place the steps in the correct packet-processing order of operations.

NO.111 An administrator would like to silently drop traffic from the internet to a ftp server.
Which Security policy action should the administrator select?

Reset-server

Block

Deny

Drop

NO.112 Based on the graphic which statement accurately describes the output shown in the server monitoring panel?

The User-ID agent is connected to a domain controller labeled lab-client.

The host lab-client has been found by the User-ID agent.

The host lab-client has been found by a domain controller.

The User-ID agent is connected to the firewall labeled lab-client.

NO.113 Match the Cyber-Attack Lifecycle stage to its correct description.

NO.114 View the diagram.

What is the most restrictive yet fully functional rule to allow general Internet and SSH traffic into both the DMZ and Untrust/lnternet zones from each of the lOT/Guest and Trust Zones?
A)

B)

C)