Valid PCNSA Practice Test Dumps with 100% Passing Guarantee [Apr-2024]
PCNSA PDF Dumps Are Helpful To produce Your Dreams Correct QA's
NEW QUESTION # 63
The PowerBall Lottery has reached an unusually high value this week. Your company has decided to raise morale by allowing employees to access the PowerBall Lottery website (www.powerball.com) for just this week. However, the company does not want employees to access any other websites also listed in the URL filtering "gambling" category.
Which method allows the employees to access the PowerBall Lottery website but without unblocking access to the "gambling" URL category?
- A. Add just the URL www.powerball.com to a Security policy allow rule.
- B. Add *.powerball.com to the URL Filtering allow list.
- C. Create a custom URL category, add *.powerball.com to it and allow it in the Security Profile.
- D. Manually remove powerball.com from the gambling URL category.
Answer: C
NEW QUESTION # 64
Prior to a maintenance-window activity, the administrator would like to make a backup of only the running configuration to an external location. What command in Device > Setup > Operations would provide the most operationally efficient way to achieve this outcome?
- A. export device state
- B. save candidate config
- C. export named configuration snapshot
- D. save named configuration snapshot
Answer: D
Explanation:
Export Named Configuration Snapshot This option exports the current running configuration, a candidate configuration snapshot, or a previously imported configuration (candidate or running). The firewall exports the configuration as an XML file with the specified name. You can save the snapshot in any network location. These exports often are used as backups. These XML files also can be used as templates for building other firewall configurations.
NEW QUESTION # 65
An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?
- A. Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory
- B. Create an Application Filter and name it Office Programs, then filter it on the business-systems category
- C. Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office
- D. Create an Application Group and add business-systems to it
Answer: A
Explanation:
Explanation
An application filter is an object that dynamically groups applications based on application attributes that you define, including category, subcategory, technology, risk factor, and characteristic. This is useful when you want to safely enable access to applications that you do not explicitly sanction, but that you want users to be able to access. For example, you may want to enable employees to choose their own office programs (such as Evernote, Google Docs, or Microsoft Office 365) for business use. To safely enable these types of applications, you could create an application filter that matches on the Category business-systems and the Subcategory office-programs. As new applications office programs emerge and new App-IDs get created, these new applications will automatically match the filter you defined; you will not have to make any additional changes to your policy rulebase to safely enable any application that matches the attributes you defined for the filter.
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/use-application-objects-in
-policy/create-an-application-filter.html
NEW QUESTION # 66
In a Security policy, what is the quickest way to reset all policy rule hit counters to zero?
- A. Use the CLI enter the command reset rules all
- B. Reboot the firewall
- C. Use the Reset Rule Hit Counter > All Rules option
- D. Highlight each rule and use the Reset Rule Hit Counter > Selected Rules
Answer: C
Explanation:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/policies/policies-security/creating-and-managing-policies
NEW QUESTION # 67
Which dynamic update type includes updated anti-spyware signatures?
- A. GlobalProtect Data File
- B. Applications and Threats
- C. Antivirus
- D. PAN-DB
Answer: B
NEW QUESTION # 68
What must be configured for the firewall to access multiple authentication profiles for external services to authenticate a non-local account?
- A. authentication list profile
- B. authentication server list
- C. LDAP server profile
- D. authentication sequence
Answer: D
Explanation:
Explanation/Reference: https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/framemaker/pan-os/7-1/pan- os-admin.pdf page 144
NEW QUESTION # 69
Which three statement describe the operation of Security Policy rules or Security Profiles? (Choose three)
- A. Security Policy rules are attached to Security Profiles.
- B. Security Profile are attached to security policy rules.
- C. Security policy rules inspect but do not block traffic.
- D. Security Profile should be used only on allowed traffic.
- E. Security Policy rules can block or allow traffic.
Answer: B,D,E
NEW QUESTION # 70
In which profile should you configure the DNS Security feature?
- A. Anti-Spyware Profile
- B. URL Filtering Profile
- C. Zone Protection Profile
- D. Antivirus Profile
Answer: A
Explanation:
Explanation/Reference:
Reference:
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/dns-security/enable- dnssecurity.html
NEW QUESTION # 71
In a security policy what is the quickest way to rest all policy rule hit counters to zero?
- A. use the Reset Rule Hit Counter > All Rules option.
- B. Reboot the firewall.
- C. Use the CLI enter the command reset rules all
- D. Highlight each rule and use the Reset Rule Hit Counter > Selected Rules.
Answer: A
NEW QUESTION # 72
What are three valid information sources that can be used when tagging users to dynamic user groups? (Choose three.)
- A. custom API scripts
- B. firewall logs
- C. DNS Security service
- D. biometric scanning results from iOS devices
- E. Security Information and Event Management Systems (SIEMS), such as Splunk
Answer: A,B,E
Explanation:
https://docs.paloaltonetworks.com/best-practices/10-1/user-id-best-practices/user-id-best- practices/user-id-best-practices-for-dynamic-user-groups Identity the user information sources for the tags:
Firewall logs
For Authentication, Data, Threat, Traffic, Tunnel Inspection, URL, and WildFire logs, create a log forwarding profile and use the Built-In Actions.
For User-ID, HIP Match, GlobalProtect, and IP-Tag logs, configure the log settings.
Cortex XSOAR
Security Information and Event Management Systems (SIEMS), such as Splunk Custom API scripts
NEW QUESTION # 73
Which three onfiguration settings are required on a Palo Alto networks firewall management interface?
- A. IP address
- B. netmask
- C. default gateway
- D. auto-negotiation
- E. hostname
Answer: A,B,C
NEW QUESTION # 74
The Palo Alto Networks NGFW was configured with a single virtual router named VR-1.
What changes are required on VR-1 to route traffic between two interfaces on the NGFW>
- A. Add interfaces to the virtual router
- B. Add a static routes to route between the two interfaces
- C. Enable the redistribution profile to redistribute connected routes
- D. Add zones attached to interfaces to the virtual router
Answer: B
NEW QUESTION # 75
Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT.
Which Security policy rule will allow traffic to flow to the web server?
- A. Untrust (any) to Untrust (10.1.1.100), web browsing -Allow
- B. Untrust (any) to DMZ (10.1.1.100), web browsing -Allow
- C. Untrust (any) to Untrust (1.1.1.100), web browsing - Allow
- D. Untrust (any) to DMZ (1.1.1.100), web browsing - Allow
Answer: D
NEW QUESTION # 76
A website is unexpectedly allowed due to miscategorization.
What are two ways to resolve this issue for a proper response? (Choose two.)
- A. Review the categorization of the website on https://urlfiltering paloaltonetworks.com.
Submit for "request change", identifying the appropriate categorization, and wait for confirmation before testing again. - B. Create a URL category and assign the affected URL.
Add a Security policy with a URL category qualifier of the custom URL category below the original policy.
Set the policy action to Deny. - C. Identify the URL category being assigned to the website.
Edit the active URL Filtering profile and update that category's site access settings to block. - D. Create a URL category and assign the affected URL.
Update the active URL Filtering profile site access setting for the custom URL category to block.
Answer: A,D
NEW QUESTION # 77
The CFO found a malware infected USB drive in the parking lot, which when inserted infected their corporate laptop. The malware contacted a known command-and-control server, which caused the infected laptop to begin exfiltrating corporate data.
Which security profile feature could have been used to prevent the communication with the command-and- control server?
- A. Create a URL filtering profile and block the DNS Sinkhole URL category
- B. Create an anti-spyware profile and enable DNS Sinkhole feature.
- C. Create a Data Filtering Profiles and enable its DNS Sinkhole feature.
- D. Create an antivirus profile and enable its DNS Sinkhole feature.
Answer: C
NEW QUESTION # 78 
Given the detailed log information above, what was the result of the firewall traffic inspection?
- A. It was blocked by the Anti-Virus Security profile action.
- B. It was blocked by the Security policy action.
- C. It was blocked by the Anti-Spyware Profile action.
- D. It was blocked by the Vulnerability Protection profile action.
Answer: C
NEW QUESTION # 79
Which Security profile prevents users from submitting valid corporate credentials online?
- A. SSL decryption
- B. WildFire
- C. Advanced threat prevention
- D. URL filtering
Answer: D
NEW QUESTION # 80
At which point in the App-ID update process can you determine if an existing policy rule is affected by an App-ID update?
- A. after clicking Check Now in the Dynamic Update window
- B. after downloading the update
- C. after committing the firewall configuration
- D. after installing the update
Answer: B
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-web-interface-help/device/device-dynamic-updates
NEW QUESTION # 81
What must be configured before setting up Credential Phishing Prevention?
- A. Threat Prevention
- B. Anti Phishing Block Page
- C. User-ID
- D. Anti Phishing profiles
Answer: A
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/prevent-credential-phishing/set-up-credential-phishing-prevention
NEW QUESTION # 82
Recently changes were made to the firewall to optimize the policies and the security team wants to see if those changes are helping. What is the quickest way to reset the hit counter to zero in all the security policy rules?
- A. Reboot the firewall
- B. Use the Reset Rule Hit Counter > All Rules option
- C. At the CLI enter the command reset rules and press Enter
- D. Highlight a rule and use the Reset Rule Hit Counter > Selected Rules for each rule
Answer: B
Explanation:
Under Policies > Security, at the the bottom of the screen, choose Reset Rule Hit Counter, available options are 1) All rules or 2) Selected Rules.
NEW QUESTION # 83
Which type of security policy rule will match traffic that flows between the Outside zone and inside zone, but would not match traffic that flows within the zones?
- A. global
- B. universal
- C. interzone
- D. intrazone
Answer: D
NEW QUESTION # 84
Starting with PAN_OS version 9.1 which new type of object is supported for use within the user field of a security policy rule?
- A. remote username
- B. static user group
- C. dynamic user group
- D. local username
Answer: C
NEW QUESTION # 85
......
How to book the PCNSA Exam
These are following steps for registering the Palo Alto Networks PCNSA exam. Step 1: Visit to Pearson VUE Exam Registration Step 2: Signup/Login to Pearson VUE account Step 3: Search for Palo Alto Networks PCNSA Exam Certifications Exam Step 4: Select Date, time and confirm with payment method
Cover PCNSA Exam Questions Make Sure You 100% Pass: https://www.prep4pass.com/PCNSA_exam-braindumps.html
New PCNSA exam Free Sample Questions to Practice: https://drive.google.com/open?id=1SC4wYB9hTw748KsTK3wOH2HQ0g_4-Oga
