ExamGecko
Login
Home / Palo Alto Networks / PCNSA / List of questions
Ask Question

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 20

Add to Whishlist

List of questions

Question 191

Report Export Collapse

Which stage of the cyber-attack lifecycle makes it important to provide ongoing education to users on spear phishing links, unknown emails, and risky websites?

Become a Premium Member for full access
  Unlock Premium Member

Question 192

Report Export Collapse

What are three factors that can be used in domain generation algorithms? (Choose three.)

Become a Premium Member for full access
  Unlock Premium Member

Question 193

Report Export Collapse

Which action would an administrator take to ensure that a service object will be available only to the selected device group?

Become a Premium Member for full access
  Unlock Premium Member

Question 194

Report Export Collapse

If using group mapping with Active Directory Universal Groups, what must you do when configuring the User-ID?

Become a Premium Member for full access
  Unlock Premium Member

Question 195

Report Export Collapse

Which administrative management services can be configured to access a management interface?

Become a Premium Member for full access
  Unlock Premium Member

Question 196

Report Export Collapse

Which feature would be useful for preventing traffic from hosting providers that place few restrictions on content, whose services are frequently used by attackers to distribute illegal or unethical material?

Become a Premium Member for full access
  Unlock Premium Member

Question 197

Report Export Collapse

Which attribute can a dynamic address group use as a filtering condition to determine its membership?

Become a Premium Member for full access
  Unlock Premium Member

Question 198

Report Export Collapse

View the diagram.

Palo Alto Networks PCNSA image Question 198 54013 09232024001155000000

What is the most restrictive yet fully functional rule to allow general Internet and SSH traffic into both the DMZ and Untrust/lnternet zones from each of the lOT/Guest and Trust Zones?

Become a Premium Member for full access
  Unlock Premium Member

Question 199

Report Export Collapse

An administrator needs to add capability to perform real-time signature lookups to block or sinkhole all known malware domains.

Which type of single unified engine will get this result?

Become a Premium Member for full access
  Unlock Premium Member

Question 200

Report Export Collapse

Which solution is a viable option to capture user identification when Active Directory is not in use?

Become a Premium Member for full access
  Unlock Premium Member
Total 362 questions
Go to page: of 37
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

An administrator is updating Security policy to align with best practices. Which Policy Optimizer feature is shown in the screenshot below?
A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base. On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days. Based on the information, how is the SuperApp traffic affected after the 30 days have passed?
Which type of DNS signatures are used by the firewall to identify malicious and command-and-control domains?
Which action would an administrator take to ensure that a service object will be available only to the selected device group?
Which firewall plane provides configuration, logging, and reporting functions on a separate processor?
Review the Screenshot: Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the SERVER zone to the DMZ on SSH only. Which rule group enables the required traffic? A) B) C) D)
An administrator needs to add capability to perform real-time signature lookups to block or sinkhole all known malware domains. Which type of single unified engine will get this result?
Which order of steps is the correct way to create a static route?
Which security profile will provide the best protection against ICMP floods, based on individual combinations of a packet`s source and destination IP address?
What are three valid source or D=destination conditions available as Security policy qualifiers? (Choose three.)