ExamGecko
Login
Home / Palo Alto Networks / PCNSA / List of questions
Ask Question

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 17

Add to Whishlist

List of questions

Question 161

Report Export Collapse

What must be considered with regards to content updates deployed from Panorama?

Become a Premium Member for full access
  Unlock Premium Member

Question 162

Report Export Collapse

During the packet flow process, which two processes are performed in application identification?

(Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 163

Report Export Collapse

Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT.

Palo Alto Networks PCNSA image Question 163 53978 09232024001155000000

Palo Alto Networks PCNSA image Question 163 53978 09232024001155000000

Which Security policy rule will allow traffic to flow to the web server?

Become a Premium Member for full access
  Unlock Premium Member

Question 164

Report Export Collapse

What does an administrator use to validate whether a session is matching an expected NAT policy?

Become a Premium Member for full access
  Unlock Premium Member

Question 165

Report Export Collapse

What is the purpose of the automated commit recovery feature?

Become a Premium Member for full access
  Unlock Premium Member

Question 166

Report Export Collapse

According to the best practices for mission critical devices, what is the recommended interval for antivirus updates?

Become a Premium Member for full access
  Unlock Premium Member

Question 167

Report Export Collapse

Which Security policy match condition would an administrator use to block traffic from IP addresses on the Palo Alto Networks EDL of Known Malicious IP Addresses list?

Become a Premium Member for full access
  Unlock Premium Member

Question 168

Report Export Collapse

URL categories can be used as match criteria on which two policy types? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 169

Report Export Collapse

Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

Palo Alto Networks PCNSA image Question 169 53984 09232024001155000000

Become a Premium Member for full access
  Unlock Premium Member

Question 170

Report Export Collapse

Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address.

Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.

Palo Alto Networks PCNSA image Question 170 53985 09232024001155000000

Which two Security policy rules will accomplish this configuration? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member
Total 362 questions
Go to page: of 37
Open VPLUS File
Convert VPLUS to PDF

Related questions

An administrator is updating Security policy to align with best practices. Which Policy Optimizer feature is shown in the screenshot below?
A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base. On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days. Based on the information, how is the SuperApp traffic affected after the 30 days have passed?
Which type of DNS signatures are used by the firewall to identify malicious and command-and-control domains?
Which action would an administrator take to ensure that a service object will be available only to the selected device group?
Which firewall plane provides configuration, logging, and reporting functions on a separate processor?
Review the Screenshot: Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the SERVER zone to the DMZ on SSH only. Which rule group enables the required traffic? A) B) C) D)
An administrator needs to add capability to perform real-time signature lookups to block or sinkhole all known malware domains. Which type of single unified engine will get this result?
Which order of steps is the correct way to create a static route?
Which security profile will provide the best protection against ICMP floods, based on individual combinations of a packet`s source and destination IP address?
What are three valid source or D=destination conditions available as Security policy qualifiers? (Choose three.)