ExamGecko
Login
Home / Palo Alto Networks / PCNSA / List of questions
Ask Question

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 12

Add to Whishlist

List of questions

Question 111

Report Export Collapse

The PowerBall Lottery has reached an unusually high value this week. Your company has decided to raise morale by allowing employees to access the PowerBall Lottery website (www.powerball.com) for just this week. However, the company does not want employees to access any other websites also listed in the URL filtering "gambling" category.

Which method allows the employees to access the PowerBall Lottery website but without unblocking access to the "gambling" URL category?

Become a Premium Member for full access
  Unlock Premium Member

Question 112

Report Export Collapse

Which type of administrator account cannot be used to authenticate user traffic flowing through the firewall's data plane?

Become a Premium Member for full access
  Unlock Premium Member

Question 113

Report Export Collapse

Access to which feature requires the PAN-OS Filtering license?

Become a Premium Member for full access
  Unlock Premium Member

Question 114

Report Export Collapse

You receive notification about new malware that is being used to attack hosts The malware exploits a software bug in a common application Which Security Profile detects and blocks access to this threat after you update the firewall's threat signature database?

Become a Premium Member for full access
  Unlock Premium Member

Question 115

Report Export Collapse

Which Security profile can you apply to protect against malware such as worms and Trojans?

Become a Premium Member for full access
  Unlock Premium Member

Question 116

Report Export Collapse

Which two settings allow you to restrict access to the management interface? (Choose two )

Become a Premium Member for full access
  Unlock Premium Member

Question 117

Report Export Collapse

Which object would an administrator create to block access to all high-risk applications?

Become a Premium Member for full access
  Unlock Premium Member

Question 118

Report Export Collapse

An administrator would like to override the default deny action for a given application and instead would like to block the traffic and send the ICMP code "communication with the destination is administratively prohibited" Which security policy action causes this?

Become a Premium Member for full access
  Unlock Premium Member

Question 119

Report Export Collapse

What is a prerequisite before enabling an administrative account which relies on a local firewall user database?

Become a Premium Member for full access
  Unlock Premium Member

Question 120

Report Export Collapse

Which two rule types allow the administrator to modify the destination zone? (Choose two )

Become a Premium Member for full access
  Unlock Premium Member
Total 362 questions
Go to page: of 37
Open VPLUS File
Convert VPLUS to PDF

Related questions

An administrator is updating Security policy to align with best practices. Which Policy Optimizer feature is shown in the screenshot below?
A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base. On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days. Based on the information, how is the SuperApp traffic affected after the 30 days have passed?
Which type of DNS signatures are used by the firewall to identify malicious and command-and-control domains?
Which action would an administrator take to ensure that a service object will be available only to the selected device group?
Which firewall plane provides configuration, logging, and reporting functions on a separate processor?
Review the Screenshot: Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the SERVER zone to the DMZ on SSH only. Which rule group enables the required traffic? A) B) C) D)
An administrator needs to add capability to perform real-time signature lookups to block or sinkhole all known malware domains. Which type of single unified engine will get this result?
Which order of steps is the correct way to create a static route?
Which security profile will provide the best protection against ICMP floods, based on individual combinations of a packet`s source and destination IP address?
What are three valid source or D=destination conditions available as Security policy qualifiers? (Choose three.)