Which statement is true regarding a Prevention Posture Assessment?

It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

The Security Policy Adoption Heatmap component filters the information by device groups, serial numbers, zones, areas of architecture, and other categories

It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

It provides a percentage of adoption for each assessment area

It performs over 200 security checks on Panorama/firewall for the assessment

The PowerBall Lottery has reached a high payout amount and a company has decided to help employee morale by allowing employees to check the number, but doesn't want to unblock the gambling URL category.Which two methods will allow the employees to get to the PowerBall Lottery site without the company unlocking the gambling URL category? (Choose two.)

Add *.powerball.com to the allow list

Create a custom URL category called PowerBall and add *.powerball.com to the category and set the action to allow.

Add all the URLs from the gambling category except powerball.com to the block list and then set the action for the gambling category to allow.

Manually remove powerball.com from the gambling URL category.

Add *.powerball.com to the allow list

Create a custom URL category called PowerBall and add *.powerball.com to the category and set the action to allow.

Which administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact and command-and-control (C2) server.Which security profile components will detect and prevent this threat after the firewall`s signature database has been updated?

data filtering profile applied to outbound security policies

antivirus profile applied to outbound security policies

data filtering profile applied to inbound security policies

data filtering profile applied to outbound security policies

vulnerability profile applied to inbound security policies

A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future Public Cloud environments. All other required connections have already been enabled between the USERS- and the OUTSIDE-zone.What configuration-changes should the Firewall-admin make?

Create a security-rule that allows traffic from zone USERS to OUTSIDE to allow traffic from any source IP-address to any destination IP-address for application SSH

Create a custom-service-object called SERVICE-SSH for destination-port-TCP-22. Create a securityrule between zone USERS and OUTSIDE to allow traffic from any source IP-address to any destination IP-address for SERVICE-SSH

Create a security-rule that allows traffic from zone USERS to OUTSIDE to allow traffic from any source IP-address to any destination IP-address for application SSH

In addition to option a, a custom-service-object called SERVICE-SSH-RETURN that contains sourceport- TCP-22 should be created. A second security-rule is required that allows traffic from zone OUTSIDE to USERS for SERVICE-SSH-RETURN for any source-IP-address to any destination-Ip-address

In addition to option c, an additional rule from zone OUTSIDE to USERS for application SSH from any source-IP-address to any destination-IP-address is required to allow the return-traffic from the SSH-servers to reach the server-admin

A network has 10 domain controllers, multiple WAN links, and a network infrastructure with bandwidth needed to support mission-critical applications. Given the scenario, which type of User-ID agent is considered a best practice by Palo Alto Networks?

Windows-based agent on a domain controller

Citrix terminal server with adequate data-plane resources

An internal host wants to connect to servers of the internet through using source NAT.Which policy is required to enable source NAT on the firewall?

NAT policy with source zone and destination zone specified

post-NAT policy with external source and any destination address

NAT policy with no source of destination zone selected

pre-NAT policy with external source and any destination address

Which path in PAN-OS 10.0 displays the list of port-based security policy rules?

Policies> Security> Rule Usage> No App Specified

Policies> Security> Rule Usage> Port only specified

Policies> Security> Rule Usage> Port-based Rules

Policies> Security> Rule Usage> Unused Apps

How is the hit count reset on a rule?

select a security policy rule, right click Hit Count > Reset

Device > Setup > Logging and Reporting Settings > Reset Hit Count

in the CLI, type command reset hitcount <POLICY-NAME>

In a security policy what is the quickest way to rest all policy rule hit counters to zero?

use the Reset Rule Hit Counter > All Rules option.

Use the CLI enter the command reset rules all

Highlight each rule and use the Reset Rule Hit Counter > Selected Rules.

use the Reset Rule Hit Counter > All Rules option.

What do dynamic user groups you to do?

create a policy that provides auto-remediation for anomalous user behavior and malicious activity

create a QoS policy that provides auto-remediation for anomalous user behavior and malicious activity

create a policy that provides auto-sizing for anomalous user behavior and malicious activity

create a policy that provides auto-remediation for anomalous user behavior and malicious activity

create a dynamic list of firewall administrators

Your company occupies one floor in a single building you have two active directory domain controllers on a single networks the firewall s management plane is only slightly utilized.Which user-ID agent sufficient in your network?

Windows-based agent deployed on each domain controller

PAN-OS integrated agent deployed on the firewall

Windows-based agent deployed on the internal network a domain member

Citrix terminal server agent deployed on the network

Windows-based agent deployed on each domain controller

At which point in the app-ID update process can you determine if an existing policy rule is affected by an app-ID update?

after clicking Check New in the Dynamic Update window

after connecting the firewall configuration

Palo Alto Networks PCNSA Practice Test 2 - Free Online Exam Prep & Questions

Given the scenario, which two statements are correct regarding multiple static default routes?

(Choose two.)

Palo Alto Networks PCNSA image Question 41 53856 09232024001155000000

Path monitoring does not determine if route is useable

Route with highest metric is actively used

Path monitoring determines if route is useable

Route with lowest metric is actively used

Comment (0)

Palo Alto Networks PCNSA Practice Test 2

Question

Palo Alto Networks PCNSA Practice Tests

Practice Tests