Palo Alto Networks PCNSA Practice Test – Member Shared Questions, Page 13

Question 121

Which statement is true about Panorama managed devices?

A.

Panorama automatically removes local configuration locks after a commit from Panorama

B.

Local configuration locks prohibit Security policy changes for a Panorama managed device

C.

Security policy rules configured on local firewalls always take precedence

D.

Local configuration locks can be manually unlocked from Panorama

Show Answer Comment (0)

Question 122

What can be achieved by selecting a policy target prior to pushing policy rules from Panorama?

A.

Doing so limits the templates that receive the policy rules

B.

Doing so provides audit information prior to making changes for selected policy rules

C.

You can specify the firewalls m a device group to which to push policy rules

D.

You specify the location as pre can - or post-rules to push policy rules

Show Answer Comment (0)

Question 123

An administrator would like to see the traffic that matches the interzone-default rule in the traffic logs.

What is the correct process to enable this logging1?

A.

Select the interzone-default rule and edit the rule on the Actions tab select Log at Session Start and click OK

B.

Select the interzone-default rule and edit the rule on the Actions tab select Log at Session End and click OK

C.

This rule has traffic logging enabled by default no further action is required

D.

Select the interzone-default rule and click Override on the Actions tab select Log at Session End and click OK

Show Answer Comment (0)

Question 124

What is the correct process tor creating a custom URL category?

A.

Objects > Security Profiles > URL Category > Add

B.

Objects > Custom Objects > URL Filtering > Add

C.

Objects > Security Profiles > URL Filtering > Add

D.

Objects > Custom Objects > URL Category > Add

Show Answer Comment (0)

Question 125

Which tab would an administrator click to create an address object?

A.

Device

B.

Policies

C.

Monitor

D.

Objects

Show Answer Comment (0)

Question 126

An administrator would like to silently drop traffic from the internet to a ftp server.

Which Security policy action should the administrator select?

A.

Reset-server

B.

Block

C.

Deny

D.

Drop

Show Answer Comment (0)

Question 127

The Palo Alto Networks NGFW was configured with a single virtual router named VR-1 What changes are required on VR-1 to route traffic between two interfaces on the NGFW?

A.

Add zones attached to interfaces to the virtual router

B.

Add interfaces to the virtual router

C.

Enable the redistribution profile to redistribute connected routes

D.

Add a static routes to route between the two interfaces

Show Answer Comment (0)

Question 128

What is the main function of the Test Policy Match function?

A.

verify that policy rules from Expedition are valid

B.

confirm that rules meet or exceed the Best Practice Assessment recommendations

C.

confirm that policy rules in the configuration are allowing/denying the correct traffic

D.

ensure that policy rules are not shadowing other policy rules

Show Answer Comment (0)

Question 129

Which option is part of the content inspection process?

A.

IPsec tunnel encryption

B.

Packet egress process

C.

SSL Proxy re-encrypt

D.

Packet forwarding process

Show Answer Comment (0)

Question 130

Which objects would be useful for combining several services that are often defined together?

A.

shared service objects

B.

service groups

C.

application groups

D.

application filters

Show Answer Comment (0)

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 13

Question list

List of questions

Question 121

(0)

Question 122

(0)

Question 123

(0)

Question 124

(0)

Question 125

(0)

Question 126

(0)

Question 127

(0)

Question 128

(0)

Question 129

(0)

Question 130

(0)

Related questions

Question 121

Question 122

Question 123

Question 124

Question 125

Question 126

Question 127

Question 128

Question 129

Question 130

BASIC - 1 Month

PLUS - 2 Months

PRO - 6 Months

BASIC - 1 Month

PLUS - 2 Months

PRO - 6 Months