An administrator would like to apply a more restrictive Security profile to traffic for file sharing applications. The administrator does not want to update the Security policy or object when new applications are released.Which object should the administrator use as a match condition in the Security policy?

an application filter for applications whose subcategory is file-sharing

the Content Delivery Networks URL category

the Online Storage and Backup URL category

an application group containing all of the file-sharing App-IDs reported in the traffic logs

an application filter for applications whose subcategory is file-sharing

Given the detailed log information above, what was the result of the firewall traffic inspection?

It was blocked by the Anti-Spyware Profile action.

It was blocked by the Vulnerability Protection profile action.

It was blocked by the Anti-Virus Security profile action.

It was blocked by the Anti-Spyware Profile action.

It was blocked by the Security policy action.

An administrator configured a Security policy rule where the matching condition includes a single application and the action is set to deny. What deny action will the firewall perform?

Discard the session's packets and send a TCP reset packet to let the client know the session has been terminated

Perform the default deny action as defined in the App-ID database for the application

Send a TCP reset packet to the client- and server-side devices

Discard the session's packets and send a TCP reset packet to let the client know the session has been terminated

A website is unexpectedly allowed due to miscategorization.What are two ways to resolve this issue for a proper response? (Choose two.)

Review the categorization of the website on https://urlfiltering.paloaltonetworks.com.Submit for "request change*, identifying the appropriate categorization, and wait for confirmation before testing again.

Create a URL category and assign the affected URL.Add a Security policy with a URL category qualifier of the custom URL category below the original policy. Set the policy action to Deny.

Identify the URL category being assigned to the website.Edit the active URL Filtering profile and update that category's site access settings to block.

Create a URL category and assign the affected URL.Update the active URL Filtering profile site access setting for the custom URL category to block.

Review the categorization of the website on https://urlfiltering.paloaltonetworks.com.Submit for "request change*, identifying the appropriate categorization, and wait for confirmation before testing again.

Create a URL category and assign the affected URL.Add a Security policy with a URL category qualifier of the custom URL category below the original policy. Set the policy action to Deny.

Why should a company have a File Blocking profile that is attached to a Security policy?

To block uploading and downloading of specific types of files

To detonate files in a sandbox environment

To block uploading and downloading of any type of files

An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. The interzone-default was never changed from its default configuration.Why doesn't the administrator see the traffic?

Logging on the interzone-default policy is disabled.

Traffic is being denied on the interzone-default policy.

The Log Forwarding profile is not configured on the policy.

The interzone-default policy is disabled by default.

Given the detailed log information above, what was the result of the firewall traffic inspection?

It was blocked by the Anti-Spyware Profile action.

It was blocked by the Anti-Virus Security profile action.

It was blocked by the Anti-Spyware Profile action.

It was blocked by the Vulnerability Protection profile action.

It was blocked by the Security policy action.

Which statement best describes a common use of Policy Optimizer?

Policy Optimizer can display which Security policies have not been used in the last 90 days.

Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications.

Policy Optimizer can add or change a Log Forwarding profile for each Security policy selected.

Policy Optimizer can display which Security policies have not been used in the last 90 days.

Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists. Admins can then manually enable policies they want to keep and delete ones they want to remove.

What is a recommended consideration when deploying content updates to the firewall from Panorama?

Before deploying content updates, always check content release version compatibility.

Content updates for firewall A/P HA pairs can only be pushed to the active firewall.

Content updates for firewall A/A HA pairs need a defined master device.

Before deploying content updates, always check content release version compatibility.

After deploying content updates, perform a commit and push to Panorama.

An administrator configured a Security policy rule with an Antivirus Security profile. The administrator did not change the action (or the profile. If a virus gets detected, how wilt the firewall handle the traffic?

It drops the traffic because the profile was not set to explicitly allow the traffic.

It allows the traffic because the profile was not set to explicitly deny the traffic.

It drops the traffic because the profile was not set to explicitly allow the traffic.

It uses the default action assigned to the virus signature.

It allows the traffic but generates an entry in the Threat logs.

Selecting the option to revert firewall changes will replace what settings?

The running configuration with settings from the candidate configuration

The candidate configuration with settings from the running configuration

The device state with settings from another configuration

Dynamic update scheduler settings

An administrator needs to allow users to use only certain email applications.How should the administrator configure the firewall to restrict users to specific email applications?

Create an application group and add the email applications to it.

Create an application filter and filter it on the collaboration category, email subcategory.

Create an application group and add the email applications to it.

Create an application filter and filter it on the collaboration category.

Create an application group and add the email category to it.

An administrator has an IP address range in the external dynamic list and wants to create an exception for one specific IP address in this address range.Which steps should the administrator take?

Add the specific IP address from the address range to the Manual Exceptions list by using regular expressions to define the entry.

Add the address range to the Manual Exceptions list and exclude the IP address by selecting the entry.

Add each IP address in the range as a list entry and then exclude the IP address by adding it to the Manual Exceptions list.

Select the address range in the List Entries list. A column will open with the IP addresses. Select the entry to exclude.

Add the specific IP address from the address range to the Manual Exceptions list by using regular expressions to define the entry.

An administrator is implementing an exception to an external dynamic list by adding an entry to the list manually. The administrator wants to save the changes, but the OK button is grayed out.What are two possible reasons the OK button is grayed out? (Choose two.)

The entry doesn't match a list entry.

The entry matches a list entry.

What are three valid information sources that can be used when tagging users to dynamic user groups? (Choose three.)

Blometric scanning results from iOS devices

Security Information and Event Management Systems (SIEMS), such as Splun

In a File Blocking profile, which two actions should be taken to allow file types that support critical apps? (Choose two.)

Clone and edit the Strict profile.

Use URL filtering to limit categories in which users can transfer files.

What can be achieved by disabling the Share Unused Address and Service Objects with Devices setting on Panorama?

Reduce the number of objects pushed to a firewall

Increase the backup capacity for configuration backups per firewall

Increase the per-firewall capacity for address and service objects

Reduce the configuration and session synchronization time between HA pairs

Reduce the number of objects pushed to a firewall

The NetSec Manager asked to create a new firewall Local Administrator profile with customized privileges named NewAdmin. This new administrator has to authenticate without inserting any username or password to access the WebUI.What steps should the administrator follow to create the New_Admin Administrator profile?

1. Select the "Use only client certificate authentication" check box.

Issue to the Client a Certificate with Common Name = NewAdmin

1. Select the "Use only client certificate authentication" check box.

Issue to the Client a Certificate with Certificate Name = NewAdmin

1. Set the Authentication profile to Local.

Select the "Use only client certificate authentication" check box.

1. Select the "Use only client certificate authentication" check box.

Why does a company need an Antivirus profile?

To protect against viruses, worms, and trojans

To prevent command-and-control traffic

To protect against viruses, worms, and trojans

To prevent access to malicious web content

Palo Alto Networks PCNSA Practice Test 7 - Free Online Exam Prep & Questions

An administrator would like to block access to a web server, while also preserving resources and minimizing half-open sockets. What are two security policy actions the administrator can select?

(Choose two.)

Become a Premium Member for full access

Unlock Premium Member

Palo Alto Networks PCNSA Practice Test 7

Question

Palo Alto Networks PCNSA Practice Tests

Practice Tests