ExamGecko

Palo Alto Networks PCNSA Practice Test - Questions Answers, Page 7

Question list
Search
Search

Which security profile will provide the best protection against ICMP floods, based on individual combinations of a packet`s source and destination IP address?

A.
DoS protection
A.
DoS protection
Answers
B.
URL filtering
B.
URL filtering
Answers
C.
packet buffering
C.
packet buffering
Answers
D.
anti-spyware
D.
anti-spyware
Answers
Suggested answer: A

Which path in PAN-OS 10.0 displays the list of port-based security policy rules?

A.
Policies> Security> Rule Usage> No App Specified
A.
Policies> Security> Rule Usage> No App Specified
Answers
B.
Policies> Security> Rule Usage> Port only specified
B.
Policies> Security> Rule Usage> Port only specified
Answers
C.
Policies> Security> Rule Usage> Port-based Rules
C.
Policies> Security> Rule Usage> Port-based Rules
Answers
D.
Policies> Security> Rule Usage> Unused Apps
D.
Policies> Security> Rule Usage> Unused Apps
Answers
Suggested answer: A

Explanation:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/security-policy-ruleoptimization/migrate-port-based-to-app-id-based-security-policy-rules.html

Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)

A.
Layer-ID
A.
Layer-ID
Answers
B.
User-ID
B.
User-ID
Answers
C.
QoS-ID
C.
QoS-ID
Answers
D.
App-ID
D.
App-ID
Answers
Suggested answer: B, D

Which path is used to save and load a configuration with a Palo Alto Networks firewall?

A.
Device>Setup>Services
A.
Device>Setup>Services
Answers
B.
Device>Setup>Management
B.
Device>Setup>Management
Answers
C.
Device>Setup>Operations
C.
Device>Setup>Operations
Answers
D.
Device>Setup>Interfaces
D.
Device>Setup>Interfaces
Answers
Suggested answer: C

Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?

A.
Review Policies
A.
Review Policies
Answers
B.
Review Apps
B.
Review Apps
Answers
C.
Pre-analyze
C.
Pre-analyze
Answers
D.
Review App Matches
D.
Review App Matches
Answers
Suggested answer: A

Explanation:

References:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/manage-new-app-idsintroduced-incontent-releases/review-new-app-id-impact-on- existing-policy-rules

How is the hit count reset on a rule?

A.
select a security policy rule, right click Hit Count > Reset
A.
select a security policy rule, right click Hit Count > Reset
Answers
B.
with a dataplane reboot
B.
with a dataplane reboot
Answers
C.
Device > Setup > Logging and Reporting Settings > Reset Hit Count
C.
Device > Setup > Logging and Reporting Settings > Reset Hit Count
Answers
D.
in the CLI, type command reset hitcount <POLICY-NAME>
D.
in the CLI, type command reset hitcount <POLICY-NAME>
Answers
Suggested answer: A

Given the topology, which zone type should interface E1/1 be configured with?

A.
Tap
A.
Tap
Answers
B.
Tunnel
B.
Tunnel
Answers
C.
Virtual Wire
C.
Virtual Wire
Answers
D.
Layer3
D.
Layer3
Answers
Suggested answer: A

Which interface type is part of a Layer 3 zone with a Palo Alto Networks firewall?

A.
Management
A.
Management
Answers
B.
High Availability
B.
High Availability
Answers
C.
Aggregate
C.
Aggregate
Answers
D.
Aggregation
D.
Aggregation
Answers
Suggested answer: C

Which security policy rule would be needed to match traffic that passes between the Outside zone and Inside zone, but does not match traffic that passes within the zones?

A.
intrazone
A.
intrazone
Answers
B.
interzone
B.
interzone
Answers
C.
universal
C.
universal
Answers
D.
global
D.
global
Answers
Suggested answer: B

Based on the show security policy rule would match all FTP traffic from the inside zone to the outside zone?

A.
internal-inside-dmz
A.
internal-inside-dmz
Answers
B.
engress outside
B.
engress outside
Answers
C.
inside-portal
C.
inside-portal
Answers
D.
intercone-default
D.
intercone-default
Answers
Suggested answer: B
Total 362 questions
Go to page: of 37