A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base.On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application

No impact because the apps were automatically downloaded and installed

No impact because the firewall automatically adds the rules to the App-ID interface

All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until the security administrator approves the applications

Which two configuration settings shown are not the default? (Choose two.)

Server Log Monitor Frequency (sec)

Which option lists the attributes that are selectable when setting up an Application filters?

Category, Subcategory, Technology, Risk, and Characteristic

Category, Subcategory, Technology, and Characteristic

Category, Subcategory, Technology, Risk, and Characteristic

Name, Category, Technology, Risk, and Characteristic

Category, Subcategory, Risk, Standard Ports, and Technology

Which two statements are correct about App-ID content updates? (Choose two.)

Updated application content may change how security policy rules are enforced

After an application content update, new applications are automatically identified and classified

Updated application content may change how security policy rules are enforced

After an application content update, new applications must be manually classified prior to use

Existing security policy rules are not affected by application content updates

After an application content update, new applications are automatically identified and classified

Which User-ID mapping method should be used for an environment with clients that do not authenticate to Windows Active Directory?

Windows session monitoring via a domain controller

passive server monitoring using the Windows-based agent

passive server monitoring using a PAN-OS integrated User-ID agent

An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory

Create an Application Group and add business-systems to it

Create an Application Filter and name it Office Programs, then filter it on the business-systems category

Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office

Which statement is true regarding a Best Practice Assessment?

The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus prevention activities

The BPA tool can be run only on firewalls

It provides a percentage of adoption for each assessment data

The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus prevention activities

It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

Complete the statement. A security profile can block or allow traffic____________

after it is matched by a security policy that allows traffic

on unknown-tcp or unknown-udp traffic

after it is matched by a security policy that allows traffic

before it is matched by a security policy

after it is matched by a security policy that allows or blocks traffic

A company moved its old port-based firewall to a new Palo Alto Networks NGFW 60 days ago. Which utility should the company use to identify out-of-date or unused rules on the firewall?

Rule Usage Filter > Hit Count > Unused in 90 days

Rule Usage Filter > No App Specified

Rule Usage Filter >Hit Count > Unused in 30 days

Rule Usage Filter > Unused Apps

Rule Usage Filter > Hit Count > Unused in 90 days

What are two differences between an implicit dependency and an explicit dependency in App-ID?(Choose two.)

An implicit dependency does not require the dependent application to be added in the security policy

An explicit dependency requires the dependent application to be added in the security policy

An implicit dependency does not require the dependent application to be added in the security policy

An implicit dependency requires the dependent application to be added in the security policy

An explicit dependency does not require the dependent application to be added in the security policy

An explicit dependency requires the dependent application to be added in the security policy

Recently changes were made to the firewall to optimize the policies and the security team wants to see if those changes are helping.What is the quickest way to reset the hit counter to zero in all the security policy rules?

Use the Reset Rule Hit Counter > All Rules option

At the CLI enter the command reset rules and press Enter

Highlight a rule and use the Reset Rule Hit Counter > Selected Rules for each rule

Use the Reset Rule Hit Counter > All Rules option

Which User-ID agent would be appropriate in a network with multiple WAN links, limited network bandwidth, and limited firewall management plane resources?

Windows-based agent deployed on the internal network

PAN-OS integrated agent deployed on the internal network

Citrix terminal server deployed on the internal network

Windows-based agent deployed on each of the WAN Links

An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall's signature database has been updated? (Choose two.)

anti-spyware profile applied to outbound security policies

URL filtering profile applied to outbound security policies

vulnerability protection profile applied to outbound security policies

anti-spyware profile applied to outbound security policies

antivirus profile applied to outbound security policies

URL filtering profile applied to outbound security policies

Identify the correct order to configure the PAN-OS integrated USER-ID agent.

create a service account on the Domain Controller with sufficient permissions to execute the User- ID agent

add the service account to monitor the server(s)

define the address of the servers to be monitored on the firewall

commit the configuration, and verify agent connection status

create a service account on the Domain Controller with sufficient permissions to execute the User- ID agent

Users from the internal zone need to be allowed to Telnet into a server in the DMZ zone.Complete the security policy to ensure only Telnet is allowed.Security Policy: Source Zone: Internal to DMZ Zone __________services "Application defaults", and action = Allow

Destination IP: 192.168.1.123/24

USER-ID = 'Allow users in Trusted'

The CFO found a USB drive in the parking lot and decide to plug it into their corporate laptop. The USB drive had malware on it that loaded onto their computer and then contacted a known command and control (CnC) server, which ordered the infected machine to begin Exfiltrating data from the laptop.Which security profile feature could have been used to prevent the communication with the CnC server?

Create an anti-spyware profile and enable DNS Sinkhole

Create an antivirus profile and enable DNS Sinkhole

Create a URL filtering profile and block the DNS Sinkhole category

Create a security policy and enable DNS Sinkhole

What are three differences between security policies and security profiles? (Choose three.)

Security profiles are attached to security policies

Security profiles should only be used on allowed traffic

Security policies can block or allow traffic

Security policies are attached to security profiles

Security profiles are attached to security policies

Security profiles should only be used on allowed traffic

Security profiles are used to block traffic by themselves

Security policies can block or allow traffic

Given the image, which two options are true about the Security policy rules. (Choose two.)

The Allow Office Programs rule is using an Application Filter

In the Allow Social Networking rule, allows all of Facebook's functions

The Allow Office Programs rule is using an Application Filter

In the Allow FTP to web server rule, FTP is allowed using App-ID

The Allow Office Programs rule is using an Application Group

In the Allow Social Networking rule, allows all of Facebook's functions

Palo Alto Networks PCNSA Practice Test 1 - Free Online Exam Prep & Questions

Which firewall plane provides configuration, logging, and reporting functions on a separate processor?

control

network processing

data

security processing

Comment (0)

Palo Alto Networks PCNSA Practice Test 1

Question

Palo Alto Networks PCNSA Practice Tests

Practice Tests