Home / Palo Alto Networks / PCNSA

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 14

Question list

List of questions

Question 131

(0)

Palo Alto Networks firewall architecture accelerates content map minimizing latency using which two components'? (Choose two )

Question 132

(0)

Which type of address object is "10 5 1 1/0 127 248 2"?

Question 133

(0)

An administrator has configured a Security policy where the matching condition includes a single application and the action is deny If the application s default deny action is reset-both what action

Question 134

(0)

How are Application Fillers or Application Groups used in firewall policy?

Question 135

(0)

An administrator wishes to follow best practices for logging traffic that traverses the firewall Which log setting is correct?

Question 136

(0)

Assume that traffic matches a Security policy rule but the attached Security Profiles is configured to block matching traffic Which statement accurately describes how the firewall will apply an acti

Question 137

(0)

You have been tasked to configure access to a new web server located in the DMZ Based on the diagram what configuration changes are required in the NGFW virtual router to route traffic from the 10 1

Question 138

(0)

An administrator wants to prevent access to media content websites that are risky Which two URL categories should be combined in a custom URL category to accomplish this goal? (Choose two)

Question 139

(0)

A Security Profile can block or allow traffic at which point?

Question 140

(0)

Given the cyber-attack lifecycle diagram identify the stage in which the attacker can run malicious code against a vulnerability in a targeted machine.

Question 131

Palo Alto Networks firewall architecture accelerates content map minimizing latency using which two components'? (Choose two )

Network Processing Engine

Single Stream-based Engine

Policy Engine

Parallel Processing Hardware

Show Answer Comment (0)

Question 132

Which type of address object is "10 5 1 1/0 127 248 2"?

IP subnet

IP wildcard mask

IP netmask

IP range

Show Answer Comment (0)

An administrator has configured a Security policy where the matching condition includes a single application and the action is deny If the application s default deny action is reset-both what action does the firewall take*?

It sends a TCP reset to the client-side and server-side devices

It silently drops the traffic and sends an ICMP unreachable code

It silently drops the traffic

It sends a TCP reset to the server-side device

Show Answer Comment (0)

Question 134

How are Application Fillers or Application Groups used in firewall policy?

An Application Filter is a static way of grouping applications and can be configured as a nested member of an Application Group

An Application Filter is a dynamic way to group applications and can be configured as a nested member of an Application Group

An Application Group is a dynamic way of grouping applications and can be configured as a nested member of an Application Group

An Application Group is a static way of grouping applications and cannot be configured as a nested member of Application Group

Show Answer Comment (0)

Question 135

An administrator wishes to follow best practices for logging traffic that traverses the firewall Which log setting is correct?

Disable all logging

Enable Log at Session End

Enable Log at Session Start

Enable Log at both Session Start and End

Show Answer Comment (0)

Question 136

Assume that traffic matches a Security policy rule but the attached Security Profiles is configured to block matching traffic Which statement accurately describes how the firewall will apply an action to matching traffic?

If it is an allowed rule, then the Security Profile action is applied last

If it is a block rule then the Security policy rule action is applied last

If it is an allow rule then the Security policy rule is applied last

If it is a block rule then Security Profile action is applied last

Show Answer Comment (0)

Question 137

You have been tasked to configure access to a new web server located in the DMZ Based on the diagram what configuration changes are required in the NGFW virtual router to route traffic from the 10 1 1 0/24 network to 192 168 1 0/24?

Add a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 192.168 1.10

Add a route with the destination of 192 168 1 0/24 using interface Eth 1/2 with a next-hop of 172.16.1.2

Add a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 172.16.1.2

Add a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 192.168.1.254

Show Answer Comment (0)

Question 138

An administrator wants to prevent access to media content websites that are risky Which two URL categories should be combined in a custom URL category to accomplish this goal?

(Choose two)

streaming-media

high-risk

recreation-and-hobbies

known-risk

Show Answer Comment (0)

Question 139

A Security Profile can block or allow traffic at which point?

after it is matched to a Security policy rule that allows traffic

on either the data plane or the management plane

after it is matched to a Security policy rule that allows or blocks traffic

before it is matched to a Security policy rule

Show Answer Comment (0)

Question 140

Given the cyber-attack lifecycle diagram identify the stage in which the attacker can run malicious code against a vulnerability in a targeted machine.