How do you reset the hit count on a security policy rule?

Select a Security policy rule, and then select Hit Count > Reset.

First disable and then re-enable the rule.

Select a Security policy rule, and then select Hit Count > Reset.

Type the CLI command reset hitcount <POLICY-NAME>.

Based on the graphic which statement accurately describes the output shown in the server monitoring panel?

The User-ID agent is connected to a domain controller labeled lab-client.

The host lab-client has been found by the User-ID agent.

The host lab-client has been found by a domain controller.

The User-ID agent is connected to the firewall labeled lab-client.

Which statements is true regarding a Heatmap report?

It provides a percentage of adoption for each assessment area.

When guided by authorized sales engineer, it helps determine te areas of greatest security risk.

It provides a percentage of adoption for each assessment area.

It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture.

Which two statements are true for the DNS security service introduced in PAN-OS version 10.0?

It functions like PAN-DB and requires activation through the app portal.

It removes the 100K limit for DNS entries for the downloaded DNS updates.

It functions like PAN-DB and requires activation through the app portal.

It removes the 100K limit for DNS entries for the downloaded DNS updates.

IT eliminates the need for dynamic DNS updates.

IT is automatically enabled and configured.

Which three statement describe the operation of Security Policy rules or Security Profiles? (Choose three)

Security Profile should be used only on allowed traffic.

Security Profile are attached to security policy rules.

Security Policy rules can block or allow traffic.

Security policy rules inspect but do not block traffic.

Security Profile should be used only on allowed traffic.

Security Profile are attached to security policy rules.

Security Policy rules are attached to Security Profiles.

Security Policy rules can block or allow traffic.

Based on the screenshot what is the purpose of the included groups?

They are used to map usernames to group names.

They are only groups visible based on the firewall's credentials.

They are used to map usernames to group names.

They contain only the users you allow to manage the firewall.

They are groups that are imported from RADIUS authentication servers.

What is an advantage for using application tags?

They help content updates automate policy updates

They are helpful during the creation of new zones

They help with the design of IP address allocations in DHCP.

They help content updates automate policy updates

They help with the creation of interfaces

Which operations are allowed when working with App-ID application tags?

Predefined tags may be augmented by custom tags.

Predefined tags may be deleted.

Predefined tags may be augmented by custom tags.

Predefined tags may be modified.

Predefined tags may be updated by WildFire dynamic updates.

You need to allow users to access the officeñsuite application of their choice. How should you configure the firewall to allow access to any office-suite application?

Create an Application Filter and name it Office Programs, then filter it on the office programs subcategory.

Create an Application Group and add Office 365, Evernote Google Docs and Libre Office

Create an Application Group and add business-systems to it.

Create an Application Filter and name it Office Programs, then filter it on the office programs subcategory.

Create an Application Filter and name it Office Programs then filter on the business-systems category.

Four configuration choices are listed, and each could be used to block access to a specific URL. If you configured each choices to block the sameURL then which choice would be the last to block access to the URL?

PAN-DB URL category in URL Filtering Profile.

Custom URL category in Security Policy rule.

Custom URL category in URL Filtering Profile.

PAN-DB URL category in URL Filtering Profile.

The CFO found a malware infected USB drive in the parking lot, which when inserted infected their corporate laptop the malware contacted a known command-and-control server which exfiltrating corporate data.Which Security profile feature could have been used to prevent the communications with the command-and-control server?

Create an Anti-Spyware Profile and enable its DNS sinkhole feature.

Create a Data Filtering Profile and enable its DNS sinkhole feature.

Create an Antivirus Profile and enable its DNS sinkhole feature.

Create an Anti-Spyware Profile and enable its DNS sinkhole feature.

Create a URL Filtering Profile and block the DNS sinkhole URL category.

All users from the internal zone must be allowed only Telnet access to a server in the DMZ zone.Complete the two empty fields in the Security Policy rules that permits only this type of access.Source Zone: Internal Destination Zone: DMZ Zone Application: _________? Service: ____________?Action: allowChoose two.

Service - "application-default"

The PowerBall Lottery has reached an unusually high value this week. Your company has decided to raise morale by allowing employees to access the PowerBall Lottery website (www.powerball.com) for just this week. However, the company does not want employees to access any other websites also listed in the URL filtering "gambling" category.Which method allows the employees to access the PowerBall Lottery website but without unblocking access to the "gambling" URL category?

Add *.powerball.com to the URL Filtering allow list.

Create a custom URL category, add *.powerball.com to it and allow it in the Security Profile.

Add just the URL www.powerball.com to a Security policy allow rule.

Manually remove powerball.com from the gambling URL category.

Add *.powerball.com to the URL Filtering allow list.

Create a custom URL category, add *.powerball.com to it and allow it in the Security Profile.

You receive notification about new malware that is being used to attack hosts The malware exploits a software bug in a common application Which Security Profile detects and blocks access to this threat after you update the firewall's threat signature database?

Antivirus Profile applied to outbound Security policy rules

Data Filtering Profile applied to outbound Security policy rules

Antivirus Profile applied to outbound Security policy rules

Data Filtering Profile applied to inbound Security policy rules

Vulnerability Profile applied to inbound Security policy rules

Which two settings allow you to restrict access to the management interface? (Choose two )

restricting HTTP and telnet using App-ID

administrative management services

restricting HTTP and telnet using App-ID

Which object would an administrator create to block access to all high-risk applications?

Vulnerability Protection profile

What is a prerequisite before enabling an administrative account which relies on a local firewall user database?

Configure an authentication profile

Configure an authentication policy

Configure an authentication sequence

Configure an authentication profile

Isolate the management interface on a dedicated management VLAN

Palo Alto Networks PCNSA Practice Test 3 - Free Online Exam Questions 81-120

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Palo Alto Networks PCNSA Practice Test 3

Question

Palo Alto Networks PCNSA Practice Tests

Practice Tests