A network administrator created an intrazone Security policy rule on the firewall. The source zones were set to IT. Finance, and HR.Which two types of traffic will the rule apply to? (Choose two)

traffic between zone IT and zone Finance

traffic between zone Finance and zone HR

What are three ways application characteristics are used? (Choose three.)

As an attribute to define an application group

As a setting to define a new custom application

As an attribute to define an application filter

As an attribute to define an application group

As a setting to define a new custom application

As an Object to define Security policies

As an attribute to define an application filter

As a global filter in the Application Command Center (ACC)

Files are sent to the WildFire cloud service via the WildFire Analysis Profile. How are these files used?

Domain Generation Algorithm (DGA) learning

How can a complete overview of the logs be displayed to an administrator who has permission in the system to view them?

Select the unified log entry in the side menu.

Modify the number of columns visible on the page

Modify the number of logs visible on each page.

Select the system logs entry in the side menu.

How are service routes used in PAN-OS?

To route management plane services through data interfaces rather than the management interface

By the OSPF protocol, as part of Dijkstra's algorithm, to give access to the various services offered in the network

To statically route subnets so they are joinable from, and have access to, the Palo Alto Networks external services

For routing, because they are the shortest path selected by the BGP routing protocol

To route management plane services through data interfaces rather than the management interface

In which three places on the PAN-OS interface can the application characteristics be found? (Choose three.)

Objects tab > Application Filters

Objects tab > Application Groups

Objects tab > Application Filters

Objects tab > Application Groups

An administrator wants to reference the same address object in Security policies on 100 Panorama managed firewalls, across 10 device groups and five templates.Which configuration action should the administrator take when creating the address object?

Ensure that the Shared option is checked.

Ensure that the Shared option is cleared.

Ensure that Disable Override is cleared.

Tag the address object with the Global tag.

Which path in PAN-OS 10.2 is used to schedule a content update to managed devices using Panorama?

Panorama > Device Deployment > Dynamic Updates > Schedules > Add

Panorama > Device Deployment > Content Updates > Schedules > Add

Panorama > Dynamic Updates > Device Deployment > Schedules > Add

Panorama > Content Updates > Device Deployment > Schedules > Add

Which action can be performed when grouping rules by group tags?

Apply Tag to the Selected Rule(s)

Which path in PAN-OS 11.x would you follow to see how new and modified App-IDs impact a Security policy?

Device > Dynamic Updates > Review App-IDs

Objects > Dynamic Updates > Review App-IDs

Device > Dynamic Updates > Review Policies

Device > Dynamic Updates > Review App-IDs

Objects > Dynamic Updates > Review Policies

Which policy set should be used to ensure that a policy is applied just before the default security rules?

Parent device-group post-rulebase

Child device-group post-rulebase

In order to attach an Antivirus, Anti-Spyware and Vulnerability Protection security profile to your Security Policy rules, which setting must be selected?

Policies > Security > Actions Tab > Select Profiles as Profile Type

Policies > Security > Actions Tab > Select Group-Profiles as Profile Type

Policies > Security > Actions Tab > Select Default-Profiles as Profile Type

Policies > Security > Actions Tab > Select Profiles as Profile Type

Policies > Security > Actions Tab > Select Tagged-Profiles as Profile Type

A systems administrator momentarily loses track of which is the test environment firewall and which is the production firewall. The administrator makes changes to the candidate configuration of the production firewall, but does not commit the changes. In addition, the configuration was not saved prior tomaking the changes.Which action will allow the administrator to undo the changes?

Revert to running configuration.

Load configuration version, and choose the first item on the list.

Load named configuration snapshot, and choose the first item on the list.

Revert to last saved configuration.

Revert to running configuration.

Which table for NAT and NPTv6 (IPv6-to-IPv6 Network Prefix Translation) settings is available only on Panorama?

NAT Active/Active HA Binding Tab

Palo Alto Networks PCNSA Practice Test 8 - Free Online Exam Prep & Questions

Which User Credential Detection method should be applied within a URL Filtering Security profile to check for the submission of a valid corporate username and the associated password?

Become a Premium Member for full access

Unlock Premium Member

Palo Alto Networks PCNSA Practice Test 8

Question

Palo Alto Networks PCNSA Practice Tests

Practice Tests