Home / Palo Alto Networks / PCNSA

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 17

Question list

List of questions

Question 161

(0)

What must be considered with regards to content updates deployed from Panorama?

Question 162

(0)

During the packet flow process, which two processes are performed in application identification? (Choose two.)

Question 163

(0)

Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT. Which Security policy rule will allow traffic to flow to the web server?

Question 164

(0)

What does an administrator use to validate whether a session is matching an expected NAT policy?

Question 165

(0)

What is the purpose of the automated commit recovery feature?

Question 166

(0)

According to the best practices for mission critical devices, what is the recommended interval for antivirus updates?

Question 167

(0)

Which Security policy match condition would an administrator use to block traffic from IP addresses on the Palo Alto Networks EDL of Known Malicious IP Addresses list?

Question 168

(0)

URL categories can be used as match criteria on which two policy types? (Choose two.)

Question 169

(0)

Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

Question 170

(0)

Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.

Question 161

What must be considered with regards to content updates deployed from Panorama?

Content update schedulers need to be configured separately per device group.

Panorama can only install up to five content versions of the same type for potential rollback scenarios.

A PAN-OS upgrade resets all scheduler configurations for content updates.

Panorama can only download one content update at a time for content updates of the same type.

Show Answer Comment (0)

Question 162

During the packet flow process, which two processes are performed in application identification?

(Choose two.)

pattern based application identification

application override policy match

session application identified

application changed from content inspection

Show Answer Comment (0)

Question 163

Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT.

Which Security policy rule will allow traffic to flow to the web server?

Untrust (any) to DMZ (10.1.1.100), web browsing -Allow

Untrust (any) to Untrust (1.1.1.100), web browsing - Allow

Untrust (any) to Untrust (10.1.1.100), web browsing -Allow

Untrust (any) to DMZ (1.1.1.100), web browsing - Allow

Show Answer Comment (0)

Question 164

What does an administrator use to validate whether a session is matching an expected NAT policy?

system log

test command

threat log

config audit

Show Answer Comment (0)

Question 165

What is the purpose of the automated commit recovery feature?

It reverts the Panorama configuration.

It causes HA synchronization to occur automatically between the HA peers after a push from Panorama.

It reverts the firewall configuration if the firewall recognizes a loss of connectivity to Panorama after the change.

It generates a config log after the Panorama configuration successfully reverts to the last running configuration.

Show Answer Comment (0)

Question 166

According to the best practices for mission critical devices, what is the recommended interval for antivirus updates?

by minute

hourly

daily

weekly

Show Answer Comment (0)

Question 167

Which Security policy match condition would an administrator use to block traffic from IP addresses on the Palo Alto Networks EDL of Known Malicious IP Addresses list?

destination address

source address

destination zone

source zone

Show Answer Comment (0)

Question 168

URL categories can be used as match criteria on which two policy types? (Choose two.)

authentication

decryption

application override

NAT

Show Answer Comment (0)

Question 169

Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

The web session was unsuccessfully decrypted.

The traffic was denied by security profile.

The traffic was denied by URL filtering.

The web session was decrypted.

Show Answer Comment (0)

Question 170

Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address.

Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.