Palo Alto Networks PCNSA Practice Test – Member Shared Questions, Page 12

Question 111

The PowerBall Lottery has reached an unusually high value this week. Your company has decided to raise morale by allowing employees to access the PowerBall Lottery website (www.powerball.com) for just this week. However, the company does not want employees to access any other websites also listed in the URL filtering "gambling" category.

Which method allows the employees to access the PowerBall Lottery website but without unblocking access to the "gambling" URL category?

A.

Add just the URL www.powerball.com to a Security policy allow rule.

B.

Manually remove powerball.com from the gambling URL category.

C.

Add *.powerball.com to the URL Filtering allow list.

D.

Create a custom URL category, add *.powerball.com to it and allow it in the Security Profile.

Show Answer Comment (0)

Question 112

Which type of administrator account cannot be used to authenticate user traffic flowing through the firewall's data plane?

A.

Kerberos user

B.

SAML user

C.

local database user

D.

local user

Show Answer Comment (0)

Question 113

Access to which feature requires the PAN-OS Filtering license?

A.

PAN-DB database

B.

DNS Security

C.

Custom URL categories

D.

URL external dynamic lists

Show Answer Comment (0)

Question 114

You receive notification about new malware that is being used to attack hosts The malware exploits a software bug in a common application Which Security Profile detects and blocks access to this threat after you update the firewall's threat signature database?

A.

Data Filtering Profile applied to outbound Security policy rules

B.

Antivirus Profile applied to outbound Security policy rules

C.

Data Filtering Profile applied to inbound Security policy rules

D.

Vulnerability Profile applied to inbound Security policy rules

Show Answer Comment (0)

Question 115

Which Security profile can you apply to protect against malware such as worms and Trojans?

A.

data filtering

B.

antivirus

C.

vulnerability protection

D.

anti-spyware

Show Answer Comment (0)

Question 116

Which two settings allow you to restrict access to the management interface? (Choose two )

A.

enabling the Content-ID filter

B.

administrative management services

C.

restricting HTTP and telnet using App-ID

D.

permitted IP addresses

Show Answer Comment (0)

Question 117

Which object would an administrator create to block access to all high-risk applications?

A.

HIP profile

B.

application filter

C.

application group

D.

Vulnerability Protection profile

Show Answer Comment (0)

Question 118

An administrator would like to override the default deny action for a given application and instead would like to block the traffic and send the ICMP code "communication with the destination is administratively prohibited" Which security policy action causes this?

A.

Drop

B.

Drop, send ICMP Unreachable

C.

Reset both

D.

Reset server

Show Answer Comment (0)

Question 119

What is a prerequisite before enabling an administrative account which relies on a local firewall user database?

A.

Configure an authentication policy

B.

Configure an authentication sequence

C.

Configure an authentication profile

D.

Isolate the management interface on a dedicated management VLAN

Show Answer Comment (0)

Question 120

Which two rule types allow the administrator to modify the destination zone? (Choose two )

A.

interzone

B.

intrazone

C.

universal

D.

shadowed

Show Answer Comment (0)

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 12

Question list

List of questions

Question 111

(0)

Question 112

(0)

Question 113

(0)

Question 114

(0)

Question 115

(0)

Question 116

(0)

Question 117

(0)

Question 118

(0)

Question 119

(0)

Question 120

(0)

Related questions

Question 111

Question 112

Question 113

Question 114

Question 115

Question 116

Question 117

Question 118

Question 119

Question 120

Question

BASIC - 1 Month

PLUS - 2 Months

PRO - 6 Months