Home / Palo Alto Networks / PCNSA

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 21

Question list

List of questions

Question 201

(0)

You receive notification about a new malware that infects hosts An infection results in the infected host attempting to contact a command-and-control server Which Security Profile when applied to ou

Question 202

(0)

Which built-in IP address EDL would be useful for preventing traffic from IP addresses that are verified as unsafe based on WildFire analysis Unit 42 research and data gathered from telemetry?

Question 203

(0)

The compliance officer requests that all evasive applications need to be blocked on all perimeter firewalls out to the internet The firewall is configured with two zones; 1. trust for internal netwo

Question 204

(0)

What must be configured before setting up Credential Phishing Prevention?

Question 205

(0)

What allows a security administrator to preview the Security policy rules that match new application signatures?

Question 206

(0)

Which statement best describes the use of Policy Optimizer?

Question 207

(0)

An address object of type IP Wildcard Mask can be referenced in which part of the configuration?

Question 208

(0)

An administrator would like to determine the default deny action for the application dns-over-httpsWhich action would yield the information?

Question 209

(0)

An administrator needs to create a Security policy rule that matches DNS traffic within the LAN zone, and also needs to match DNS traffic within the DMZ zone The administrator does not want to allow

Question 210

(0)

DRAG DROP Match the Palo Alto Networks Security Operating Platform architecture to its description.

Question 201

You receive notification about a new malware that infects hosts An infection results in the infected host attempting to contact a command-and-control server Which Security Profile when applied to outbound Security policy rules detects and prevents this threat from establishing a command-andcontrol connection?

Antivirus Profile

Data Filtering Profile

Vulnerability Protection Profile

Anti-Spyware Profile

Show Answer Comment (0)

Question 202

Which built-in IP address EDL would be useful for preventing traffic from IP addresses that are verified as unsafe based on WildFire analysis Unit 42 research and data gathered from telemetry?

Palo Alto Networks C&C IP Addresses

Palo Alto Networks Bulletproof IP Addresses

Palo Alto Networks High-Risk IP Addresses

Palo Alto Networks Known Malicious IP Addresses

Show Answer Comment (0)

Question 203

The compliance officer requests that all evasive applications need to be blocked on all perimeter firewalls out to the internet The firewall is configured with two zones; 1. trust for internal networks 2. untrust to the internet Based on the capabilities of the Palo Alto Networks NGFW, what are two ways to configure a security policy using App-ID to comply with this request? (Choose two )

Create a deny rule at the top of the policy from trust to untrust over any service and select evasive as the application

Create a deny rule at the top of the policy from trust to untrust with service application-default and select evasive as the application.

Create a deny rule at the top of the policy from trust to untrust over any service and add an application filter with the evasive characteristic.

Create a deny rule at the top of the policy from trust to untrust with service application-default and add an application filter with the evasive characteristic

Show Answer Comment (0)

Question 204

What must be configured before setting up Credential Phishing Prevention?

Anti Phishing Block Page

Threat Prevention

Anti Phishing profiles

User-ID

Show Answer Comment (0)

Question 205

What allows a security administrator to preview the Security policy rules that match new application signatures?

Review Release Notes

Dynamic Updates-Review Policies

Dynamic Updates-Review App

Policy Optimizer-New App Viewer

Show Answer Comment (0)

Question 206

Which statement best describes the use of Policy Optimizer?

Policy Optimizer can display which Security policies have not been used in the last 90 days

Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications

Policy Optimizer can add or change a Log Forwarding profile for each Secunty policy selected

Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists Admins can then manually enable policies they want to keep and delete ones they want to remove

Show Answer Comment (0)

Question 207

An address object of type IP Wildcard Mask can be referenced in which part of the configuration?

Security policy rule

ACC global filter

external dynamic list

NAT address pool

Show Answer Comment (0)

Question 208

An administrator would like to determine the default deny action for the application dns-over-httpsWhich action would yield the information?

View the application details in beacon paloaltonetworks.com

Check the action for the Security policy matching that traffic

Check the action for the decoder in the antivirus profile

View the application details in Objects > Applications

Show Answer Comment (0)

Question 209

An administrator needs to create a Security policy rule that matches DNS traffic within the LAN zone, and also needs to match DNS traffic within the DMZ zone The administrator does not want to allow traffic between the DMZ and LAN zones.

Which Security policy rule type should they use?

default

universal

intrazone

interzone

Show Answer Comment (0)