ExamGecko
Login
Home / Palo Alto Networks / PCNSA / List of questions
Ask Question

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 14

Add to Whishlist

List of questions

Question 131

Report Export Collapse

Palo Alto Networks firewall architecture accelerates content map minimizing latency using which two components'? (Choose two )

Become a Premium Member for full access
  Unlock Premium Member

Question 132

Report Export Collapse

Which type of address object is "10 5 1 1/0 127 248 2"?

Become a Premium Member for full access
  Unlock Premium Member

Question 133

Report Export Collapse

An administrator has configured a Security policy where the matching condition includes a single application and the action is deny If the application s default deny action is reset-both what action does the firewall take*?

Become a Premium Member for full access
  Unlock Premium Member

Question 134

Report Export Collapse

How are Application Fillers or Application Groups used in firewall policy?

Become a Premium Member for full access
  Unlock Premium Member

Question 135

Report Export Collapse

An administrator wishes to follow best practices for logging traffic that traverses the firewall Which log setting is correct?

Become a Premium Member for full access
  Unlock Premium Member

Question 136

Report Export Collapse

Assume that traffic matches a Security policy rule but the attached Security Profiles is configured to block matching traffic Which statement accurately describes how the firewall will apply an action to matching traffic?

Become a Premium Member for full access
  Unlock Premium Member

Question 137

Report Export Collapse

You have been tasked to configure access to a new web server located in the DMZ Based on the diagram what configuration changes are required in the NGFW virtual router to route traffic from the 10 1 1 0/24 network to 192 168 1 0/24?

Palo Alto Networks PCNSA image Question 137 53952 09232024001155000000

Become a Premium Member for full access
  Unlock Premium Member

Question 138

Report Export Collapse

An administrator wants to prevent access to media content websites that are risky Which two URL categories should be combined in a custom URL category to accomplish this goal?

(Choose two)

Become a Premium Member for full access
  Unlock Premium Member

Question 139

Report Export Collapse

A Security Profile can block or allow traffic at which point?

Become a Premium Member for full access
  Unlock Premium Member

Question 140

Report Export Collapse

Given the cyber-attack lifecycle diagram identify the stage in which the attacker can run malicious code against a vulnerability in a targeted machine.

Palo Alto Networks PCNSA image Question 140 53955 09232024001155000000

Become a Premium Member for full access
  Unlock Premium Member
Total 362 questions
Go to page: of 37
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

An administrator is updating Security policy to align with best practices. Which Policy Optimizer feature is shown in the screenshot below?
A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base. On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days. Based on the information, how is the SuperApp traffic affected after the 30 days have passed?
Which type of DNS signatures are used by the firewall to identify malicious and command-and-control domains?
Which action would an administrator take to ensure that a service object will be available only to the selected device group?
Which firewall plane provides configuration, logging, and reporting functions on a separate processor?
Review the Screenshot: Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the SERVER zone to the DMZ on SSH only. Which rule group enables the required traffic? A) B) C) D)
An administrator needs to add capability to perform real-time signature lookups to block or sinkhole all known malware domains. Which type of single unified engine will get this result?
Which order of steps is the correct way to create a static route?
Which security profile will provide the best protection against ICMP floods, based on individual combinations of a packet`s source and destination IP address?
What are three valid source or D=destination conditions available as Security policy qualifiers? (Choose three.)