Weekend Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: xmas50

Paloalto Networks PCNSA - Palo Alto Networks Certified Network Security Administrator (PAN-OS 10.0)

Page: 2 / 11
Total 364 questions

The firewall sends employees an application block page when they try to access Youtube.

Which Security policy rule is blocking the youtube application?

A.

intrazone-default

B.

Deny Google

C.

allowed-security services

D.

interzone-default

Which statement is true regarding a Best Practice Assessment?

A.

The BPA tool can be run only on firewalls

B.

It provides a percentage of adoption for each assessment data

C.

The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus prevention activities

D.

It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

An administrator would like to override the default deny action for a given application and instead would like to block the traffic and send the ICMP code "communication with the destination is administratively prohibited"

Which security policy action causes this?

A.

Drop

B.

Drop, send ICMP Unreachable

C.

Reset both

D.

Reset server

Which two App-ID applications will need to be allowed to use Facebook-chat? (Choose two.)

A.

facebook

B.

facebook-chat

C.

facebook-base

D.

facebook-email

Which five Zero Trust concepts does a Palo Alto Networks firewall apply to achieve an integrated approach to prevent threats? (Choose five.)

A.

User identification

B.

Filtration protection

C.

Vulnerability protection

D.

Antivirus

E.

Application identification

F.

Anti-spyware

Which object would an administrator create to enable access to all applications in the office-programs subcategory?

A.

HIP profile

B.

Application group

C.

URL category

D.

Application filter

Which administrator type utilizes predefined roles for a local administrator account?

A.

Superuser

B.

Role-based

C.

Dynamic

D.

Device administrator

An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

A.

Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory

B.

Create an Application Group and add business-systems to it

C.

Create an Application Filter and name it Office Programs, then filter it on the business-systems category

D.

Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office

What in the minimum frequency for which you can configure the firewall too check for new wildfire antivirus signatures?

A.

every 5 minutes

B.

every 1 minute

C.

every 24 hours

D.

every 30 minutes

Which interface type is used to monitor traffic and cannot be used to perform traffic shaping?

A.

Layer 2

B.

Tap

C.

Layer 3

D.

Virtual Wire