Palo Alto Networks PCNSA Practice Test – Member Shared Questions, Page 16

Question 151

Which URL Filtering profile action would you set to allow users the option to access a site only if they provide a URL admin password?

A.

override

B.

authorization

C.

authentication

D.

continue

Show Answer Comment (0)

Question 152

Selecting the option to revert firewall changes will replace what settings?

A.

the running configuration with settings from the candidate configuration

B.

the device state with settings from another configuration

C.

the candidate configuration with settings from the running configuration

D.

dynamic update scheduler settings

Show Answer Comment (0)

Question 153

What is considered best practice with regards to committing configuration changes?

A.

Disable the automatic commit feature that prioritizes content database installations before committing

B.

Validate configuration changes prior to committing

C.

Wait until all running and pending jobs are finished before committing

D.

Export configuration after each single configuration change performed

Show Answer Comment (0)

Question 154

An administrator wants to prevent users from submitting corporate credentials in a phishing attack.

Which Security profile should be applied?

A.

antivirus

B.

anti-spyware

C.

URL filtering

D.

vulnerability protection

Show Answer Comment (0)

Question 155

Which Security profile would you apply to identify infected hosts on the protected network using DNS traffic?

A.

URL traffic

B.

vulnerability protection

C.

anti-spyware

D.

antivirus

Show Answer Comment (0)

Question 156

Which two firewall components enable you to configure SYN flood protection thresholds? (Choose two.)

A.

QoS profile

B.

DoS Protection profile

C.

Zone Protection profile

D.

DoS Protection policy

Show Answer Comment (0)

Question 157

What is the main function of Policy Optimizer?

A.

reduce load on the management plane by highlighting combinable security rules

B.

migrate other firewall vendors' security rules to Palo Alto Networks configuration

C.

eliminate "Log at Session Start" security rules

D.

convert port-based security rules to application-based security rules

Show Answer Comment (0)

Question 158

How does an administrator schedule an Applications and Threats dynamic update while delaying installation of the update for a certain amount of time?

A.

Disable automatic updates during weekdays

B.

Automatically "download and install" but with the "disable new applications" option used

C.

Automatically "download only" and then install Applications and Threats later, after the administrator approves the update

D.

Configure the option for "Threshold"

Show Answer Comment (0)

Question 159

You receive notification about new malware that infects hosts through malicious files transferred by FTP.

Which Security profile detects and protects your internal networks from this threat after you update your firewall's threat signature database?

A.

URL Filtering profile applied to inbound Security policy rules.

B.

Data Filtering profile applied to outbound Security policy rules.

C.

Antivirus profile applied to inbound Security policy rules.

D.

Vulnerability Prote ction profile applied to outbound Security policy rules.

Show Answer Comment (0)

Question 160

Which rule type is appropriate for matching traffic both within and between the source and destination zones?

A.

interzone

B.

shadowed

C.

intrazone

D.

universal

Show Answer Comment (0)

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 16

Question list

List of questions

Question 151

(0)

Question 152

(0)

Question 153

(0)

Question 154

(0)

Question 155

(0)

Question 156

(0)

Question 157

(0)

Question 158

(0)

Question 159

(0)

Question 160

(0)

Related questions

Question 151

Question 152

Question 153

Question 154

Question 155

Question 156

Question 157

Question 158

Question 159

Question 160

Question

BASIC - 1 Month

PLUS - 2 Months

PRO - 6 Months