ExamGecko
Search Search Login
Home Home / Palo Alto Networks / PCNSA
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which action would an administrator take to ensure that a service object will be available only to the selected device group?
Which type of DNS signatures are used by the firewall to identify malicious and command-and-control domains?
An administrator needs to add capability to perform real-time signature lookups to block or sinkhole all known malware domains. Which type of single unified engine will get this result?
Which order of steps is the correct way to create a static route?
Which statement is true about Panorama managed devices?
What are three valid source or D=destination conditions available as Security policy qualifiers? (Choose three.)
An administrator is updating Security policy to align with best practices. Which Policy Optimizer feature is shown in the screenshot below?
Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)
Which security profile will provide the best protection against ICMP floods, based on individual combinations of a packet`s source and destination IP address?
Review the Screenshot: Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the SERVER zone to the DMZ on SSH only. Which rule group enables the required traffic? A) B) C) D)

Question 343 - PCNSA discussion

Report
Export

How would a Security policy need to be written to allow outbound traffic using Secure Shell (SSH) to destination ports tcp/22 and tcp/4422?

A.
The admin creates a custom service object named 'tcp-4422' with port tcp/4422. The admin then creates a Security policy allowing application 'ssh' and service 'tcp-4422'.
Answers
A.
The admin creates a custom service object named 'tcp-4422' with port tcp/4422. The admin then creates a Security policy allowing application 'ssh' and service 'tcp-4422'.
B.
The admin creates a custom service object named 'tcp-4422' with port tcp/4422. The admin then creates a Security policy allowing application 'ssh', service 'tcp-4422'. and service 'application-default'.
Answers
B.
The admin creates a custom service object named 'tcp-4422' with port tcp/4422. The admin then creates a Security policy allowing application 'ssh', service 'tcp-4422'. and service 'application-default'.
C.
The admin creates a Security policy allowing application 'ssh' and service 'application-default'.
Answers
C.
The admin creates a Security policy allowing application 'ssh' and service 'application-default'.
D.
The admin creates a custom service object named 'tcp-4422' with port tcp/4422. The admin also creates a custom service object named 'tcp-22' with port tcp/22. The admin then creates a Security policy allowing application 'ssh', service 'tcp-4422'. and service 'tcp-22'.
Answers
D.
The admin creates a custom service object named 'tcp-4422' with port tcp/4422. The admin also creates a custom service object named 'tcp-22' with port tcp/22. The admin then creates a Security policy allowing application 'ssh', service 'tcp-4422'. and service 'tcp-22'.
Suggested answer: D
Show Answer
asked 23/09/2024
Leila Bekirova
39 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms