Home / Palo Alto Networks / PCNSA

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 6

Question list

List of questions

Question 51

(0)

Which update option is not available to administrators?

Question 52

(0)

A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future Public Cloud environments. All other required connections have already been enabled between the

Question 53

(0)

How often does WildFire release dynamic updates?

Question 54

(0)

What is the minimum timeframe that can be set on the firewall to check for new WildFire signatures?

Question 55

(0)

A network has 10 domain controllers, multiple WAN links, and a network infrastructure with bandwidth needed to support mission-critical applications. Given the scenario, which type of User-ID agent

Question 56

(0)

What must be configured for the firewall to access multiple authentication profiles for external services to authenticate a non-local account?

Question 57

(0)

Which prevention technique will prevent attacks based on packet count?

Question 58

(0)

Which interface type can use virtual routers and routing protocols?

Question 59

(0)

Which URL profiling action does not generate a log entry when a user attempts to access that URL?

Question 60

(0)

An internal host wants to connect to servers of the internet through using source NAT. Which policy is required to enable source NAT on the firewall?

Question 51

Which update option is not available to administrators?

New Spyware Notifications

New URLs

New Application Signatures

New Malicious Domains

New Antivirus Signatures

Show Answer Comment (0)

A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future Public Cloud environments. All other required connections have already been enabled between the USERS- and the OUTSIDE-zone.

What configuration-changes should the Firewall-admin make?

Create a custom-service-object called SERVICE-SSH for destination-port-TCP-22. Create a securityrule between zone USERS and OUTSIDE to allow traffic from any source IP-address to any destination IP-address for SERVICE-SSH

Create a security-rule that allows traffic from zone USERS to OUTSIDE to allow traffic from any source IP-address to any destination IP-address for application SSH

In addition to option a, a custom-service-object called SERVICE-SSH-RETURN that contains sourceport- TCP-22 should be created. A second security-rule is required that allows traffic from zone OUTSIDE to USERS for SERVICE-SSH-RETURN for any source-IP-address to any destination-Ip-address

In addition to option c, an additional rule from zone OUTSIDE to USERS for application SSH from any source-IP-address to any destination-IP-address is required to allow the return-traffic from the SSH-servers to reach the server-admin

Show Answer Comment (0)

Question 53

How often does WildFire release dynamic updates?

every 5 minutes

every 15 minutes

every 60 minutes

every 30 minutes

Show Answer Comment (0)

Question 54

What is the minimum timeframe that can be set on the firewall to check for new WildFire signatures?

every 30 minutes

every 5 minutes

once every 24 hours

every 1 minute

Show Answer Comment (0)

Question 55

A network has 10 domain controllers, multiple WAN links, and a network infrastructure with bandwidth needed to support mission-critical applications. Given the scenario, which type of User-ID agent is considered a best practice by Palo Alto Networks?

Windows-based agent on a domain controller

Captive Portal

Citrix terminal server with adequate data-plane resources

PAN-OS integrated agent

Show Answer Comment (0)