ExamGecko
Login
Home / Palo Alto Networks / PCNSA / List of questions
Ask Question

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 36

Add to Whishlist

List of questions

Question 351

Report Export Collapse

Which System log severity level would be displayed as a result of a user password change?

Become a Premium Member for full access
  Unlock Premium Member

Question 352

Report Export Collapse

Which situation is recorded as a system log?

Become a Premium Member for full access
  Unlock Premium Member

Question 353

Report Export Collapse

Where within the URL Filtering security profile must a user configure the action to prevent credential submissions?

Become a Premium Member for full access
  Unlock Premium Member

Question 354

Report Export Collapse

Which two features implement one-to-one translation of a source IP address while allowing the source port to change? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 355

Report Export Collapse

A network administrator creates an intrazone security policy rule on a NGFW. The source zones are set to IT. Finance, and HR.

To which two types of traffic will the rule apply? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 356

Report Export Collapse

An organization has some applications that are restricted for access by the Human Resources Department only, and other applications that are available for any known user in the organization.

What object is best suited for this configuration?

Become a Premium Member for full access
  Unlock Premium Member

Question 357

Report Export Collapse

Which order of steps is the correct way to create a static route?

Become a Premium Member for full access
  Unlock Premium Member

Question 358

Report Export Collapse

Which two actions are needed for an administrator to get real-time WildFire signatures? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 359

Report Export Collapse

In the PAN-OS Web Interface, which is a session distribution method offered under NAT Translated Packet Tab to choose how the firewall assigns sessions?

Become a Premium Member for full access
  Unlock Premium Member

Question 360

Report Export Collapse

Review the Screenshot:

Palo Alto Networks PCNSA image Question 360 54175 09232024001155000000

Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the

SERVER zone to the DMZ on SSH only.

Which rule group enables the required traffic?

A)

Palo Alto Networks PCNSA image Question 360 54175 09232024001155000000

B)

Palo Alto Networks PCNSA image Question 360 54175 09232024001155000000

C)

Palo Alto Networks PCNSA image Question 360 54175 09232024001155000000

D)

Palo Alto Networks PCNSA image Question 360 54175 09232024001155000000

Become a Premium Member for full access
  Unlock Premium Member
Total 362 questions
Go to page: of 37
Open VPLUS File
Convert VPLUS to PDF

Related questions

An administrator is updating Security policy to align with best practices. Which Policy Optimizer feature is shown in the screenshot below?
A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base. On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days. Based on the information, how is the SuperApp traffic affected after the 30 days have passed?
Which type of DNS signatures are used by the firewall to identify malicious and command-and-control domains?
Which action would an administrator take to ensure that a service object will be available only to the selected device group?
Which firewall plane provides configuration, logging, and reporting functions on a separate processor?
Review the Screenshot: Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the SERVER zone to the DMZ on SSH only. Which rule group enables the required traffic? A) B) C) D)
An administrator needs to add capability to perform real-time signature lookups to block or sinkhole all known malware domains. Which type of single unified engine will get this result?
Which order of steps is the correct way to create a static route?
Which security profile will provide the best protection against ICMP floods, based on individual combinations of a packet`s source and destination IP address?
What are three valid source or D=destination conditions available as Security policy qualifiers? (Choose three.)