Which built-in IP address EDL would be useful for preventing traffic from IP addresses that are verified as unsafe based on WildFire analysis Unit 42 research and data gathered from telemetry?

Palo Alto Networks Known Malicious IP Addresses

Palo Alto Networks C&C IP Addresses

Palo Alto Networks Bulletproof IP Addresses

Palo Alto Networks High-Risk IP Addresses

Palo Alto Networks Known Malicious IP Addresses

The compliance officer requests that all evasive applications need to be blocked on all perimeter firewalls out to the internet The firewall is configured with two zones; 1. trust for internal networks 2. untrust to the internet Based on the capabilities of the Palo Alto Networks NGFW, what are two ways to configure a security policy using App-ID to comply with this request? (Choose two )

Create a deny rule at the top of the policy from trust to untrust over any service and select evasive as the application

Create a deny rule at the top of the policy from trust to untrust with service application-default and add an application filter with the evasive characteristic

Create a deny rule at the top of the policy from trust to untrust over any service and select evasive as the application

Create a deny rule at the top of the policy from trust to untrust with service application-default and select evasive as the application.

Create a deny rule at the top of the policy from trust to untrust over any service and add an application filter with the evasive characteristic.

Create a deny rule at the top of the policy from trust to untrust with service application-default and add an application filter with the evasive characteristic

What allows a security administrator to preview the Security policy rules that match new application signatures?

Dynamic Updates-Review Policies

Policy Optimizer-New App Viewer

Which statement best describes the use of Policy Optimizer?

Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications

Policy Optimizer can display which Security policies have not been used in the last 90 days

Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications

Policy Optimizer can add or change a Log Forwarding profile for each Secunty policy selected

Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists Admins can then manually enable policies they want to keep and delete ones they want to remove

An administrator would like to determine the default deny action for the application dns-over-httpsWhich action would yield the information?

Check the action for the decoder in the antivirus profile

View the application details in beacon paloaltonetworks.com

Check the action for the Security policy matching that traffic

Check the action for the decoder in the antivirus profile

View the application details in Objects > Applications

What are three valid ways to map an IP address to a username? (Choose three.)

a user connecting into a GlobalProtect gateway using a GlobalProtect Agent

usernames inserted inside HTTP Headers

a user connecting into a GlobalProtect gateway using a GlobalProtect Agent

usernames inserted inside HTTP Headers

An administrator would like to create a URL Filtering log entry when users browse to any gambling website. What combination of Security policy and Security profile actions is correct?

Security policy = allow, Gambling category in URL profile = alert

Security policy = drop, Gambling category in URL profile = allow

Security policy = deny. Gambling category in URL profile = block

Security policy = allow, Gambling category in URL profile = alert

Security policy = allow. Gambling category in URL profile = allow

Which statement is true regarding NAT rules?

NAT rules are processed in order from top to bottom.

Static NAT rules have precedence over other forms of NAT.

Translation of the IP address and port occurs before security processing.

NAT rules are processed in order from top to bottom.

Firewall supports NAT on Layer 3 interfaces only.

After making multiple changes to the candidate configuration of a firewall, the administrator would like to start over with a candidate configuration that matches the running configuration.Which command in Device > Setup > Operations would provide the most operationally efficient way to accomplish this?

Revert to running configuration

Load named configuration snapshot

Revert to running configuration

Revert to last saved configuration

An administrator is reviewing the Security policy rules shown in the screenshot below.Which statement is correct about the information displayed?

The view Rulebase as Groups is checked.

Eleven rules use the "Infrastructure* tag.

The view Rulebase as Groups is checked.

There are seven Security policy rules on this firewall.

Highlight Unused Rules is checked.

What is a function of application tags?

automated referenced applications in a policy

What are three Palo Alto Networks best practices when implementing the DNS Security Service?(Choose three.)

Implement a threat intel program.

Configure a URL Filtering profile.

Implement a threat intel program.

Configure a URL Filtering profile.

Train your staff to be security aware.

What does an application filter help you to do?

It dynamically groups applications based on application attributes such as category and subcategory.

It dynamically provides application statistics based on network, threat, and blocked activity,

It dynamically filters applications based on critical, high, medium, low. or informational severity.

It dynamically groups applications based on application attributes such as category and subcategory.

It dynamically shapes defined application traffic based on active sessions and bandwidth usage.

Prior to a maintenance-window activity, the administrator would like to make a backup of only the running configuration to an external location. What command in Device > Setup > Operations would provide the most operationally efficient way to achieve this outcome?

save named configuration snapshot

export named configuration snapshot

An administrator wants to create a No-NAT rule to exempt a flow from the default NAT rule. What is the best way to do this?

Create a new NAT rule with the correct parameters and leave the translation type as None

Create a Security policy rule to allow the traffic.

Create a new NAT rule with the correct parameters and leave the translation type as None

Create a static NAT rule with an application override.

Create a static NAT rule translating to the destination interface.

An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. The interzone-default was never changed from its default configuration.Why doesn't the administrator see the traffic?

Logging on the interzone-default policy is disabled

Traffic is being denied on the interzone-default policy.

The Log Forwarding profile is not configured on the policy.

The interzone-default policy is disabled by default

Logging on the interzone-default policy is disabled

What are three characteristics of the Palo Alto Networks DNS Security service? (Choose three.)

It uses techniques such as DGA.DNS tunneling detection and machine learning.

It requires a valid Threat Prevention license.

It enables users to access real-time protections using advanced predictive analytics.

It uses techniques such as DGA.DNS tunneling detection and machine learning.

It requires a valid Threat Prevention license.

It enables users to access real-time protections using advanced predictive analytics.

It requires a valid URL Filtering license.

It requires an active subscription to a third-party DNS Security service.

What are the requirements for using Palo Alto Networks EDL Hosting Sen/ice?

any supported Palo Alto Networks firewall or Prisma Access firewall

an additional subscription free of charge

a firewall device running with a minimum version of PAN-OS 10.1

an additional paid subscription

Palo Alto Networks PCNSA Practice Test 6 - Free Online Exam Prep & Questions

You receive notification about a new malware that infects hosts An infection results in the infected host attempting to contact a command-and-control server Which Security Profile when applied to outbound Security policy rules detects and prevents this threat from establishing a command-andcontrol connection?

Become a Premium Member for full access

Unlock Premium Member

Palo Alto Networks PCNSA Practice Test 6

Question

Palo Alto Networks PCNSA Practice Tests

Practice Tests