Home / Palo Alto Networks / PCNSA

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 26

Question list

List of questions

Question 251

(0)

A website is unexpectedly allowed due to miscategorization. What are two ways to resolve this issue for a proper response? (Choose two.)

Question 252

(0)

Why should a company have a File Blocking profile that is attached to a Security policy?

Question 253

(0)

An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. The interzone-defau

Question 254

(0)

Given the detailed log information above, what was the result of the firewall traffic inspection?

Question 255

(0)

An administrator would like to protect against inbound threats such as buffer overflows and illegal code execution. Which Security profile should be used?

Question 256

(0)

Which statement best describes a common use of Policy Optimizer?

Question 257

(0)

Which rule type is appropriate for matching traffic occurring within a specified zone?

Question 258

(0)

What is a recommended consideration when deploying content updates to the firewall from Panorama?

Question 259

(0)

Which Security policy action will message a user's browser thai their web session has been terminated?

Question 260

(0)

An administrator configured a Security policy rule with an Antivirus Security profile. The administrator did not change the action (or the profile. If a virus gets detected, how wilt the firewall ha

Question 251

A website is unexpectedly allowed due to miscategorization.

What are two ways to resolve this issue for a proper response? (Choose two.)

Identify the URL category being assigned to the website.Edit the active URL Filtering profile and update that category's site access settings to block.

Create a URL category and assign the affected URL.Update the active URL Filtering profile site access setting for the custom URL category to block.

Review the categorization of the website on https://urlfiltering.paloaltonetworks.com.Submit for "request change*, identifying the appropriate categorization, and wait for confirmation before testing again.

Create a URL category and assign the affected URL.Add a Security policy with a URL category qualifier of the custom URL category below the original policy. Set the policy action to Deny.

Show Answer Comment (0)

Question 252

Why should a company have a File Blocking profile that is attached to a Security policy?

To block uploading and downloading of specific types of files

To detonate files in a sandbox environment

To analyze file types

To block uploading and downloading of any type of files

Show Answer Comment (0)

Question 253

An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. The interzone-default was never changed from its default configuration.

Why doesn't the administrator see the traffic?

Logging on the interzone-default policy is disabled.

Traffic is being denied on the interzone-default policy.

The Log Forwarding profile is not configured on the policy.

The interzone-default policy is disabled by default.

Show Answer Comment (0)

Question 254

Given the detailed log information above, what was the result of the firewall traffic inspection?

It was blocked by the Anti-Virus Security profile action.

It was blocked by the Anti-Spyware Profile action.

It was blocked by the Vulnerability Protection profile action.

It was blocked by the Security policy action.

Show Answer Comment (0)

Question 255

An administrator would like to protect against inbound threats such as buffer overflows and illegal code execution.

Which Security profile should be used?

Antivirus

URL filtering

Anti-spyware

Vulnerability protection

Show Answer Comment (0)

Question 256

Which statement best describes a common use of Policy Optimizer?

Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications.

Policy Optimizer can add or change a Log Forwarding profile for each Security policy selected.

Policy Optimizer can display which Security policies have not been used in the last 90 days.

Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists. Admins can then manually enable policies they want to keep and delete ones they want to remove.

Show Answer Comment (0)

Question 257

Which rule type is appropriate for matching traffic occurring within a specified zone?

Interzone

Universal

Intrazone

Shadowed

Show Answer Comment (0)

Question 258

What is a recommended consideration when deploying content updates to the firewall from Panorama?

Content updates for firewall A/P HA pairs can only be pushed to the active firewall.

Content updates for firewall A/A HA pairs need a defined master device.

Before deploying content updates, always check content release version compatibility.

After deploying content updates, perform a commit and push to Panorama.

Show Answer Comment (0)

Question 259

Which Security policy action will message a user's browser thai their web session has been terminated?

Reset server

Deny

Drop

Reset client

Show Answer Comment (0)

Question 260

An administrator configured a Security policy rule with an Antivirus Security profile. The administrator did not change the action (or the profile. If a virus gets detected, how wilt the firewall handle the traffic?

It allows the traffic because the profile was not set to explicitly deny the traffic.

It drops the traffic because the profile was not set to explicitly allow the traffic.

It uses the default action assigned to the virus signature.

It allows the traffic but generates an entry in the Threat logs.

Show Answer Comment (0)

Total 362 questions