Exam (elaborations)
Palo Alto PCNSA Practice Questions And Answers 100% Solved 2024/2025
- Course
- Institution
Palo Alto PCNSA Practice Questions And Answers 100% Solved 2024/2025
[Show more]
Seller
Follow
Content preview
Palo Alto PCNSA Practice Questions AndAnswers
What are two valid tag types for use in a DAG?
(Choose two.)
A. dynamic tag
B. membership tag
C. wildcard tag
D. static tag
AD
Which interface type is used to monitor traffic and cannot be used to perform traffic shaping?
A. Virtual Wire
B. Layer3
C. Layer2
D. Tap
D
Previous
Play
Next
Rewind 10 seconds
Move forward 10 seconds
Unmute
0:00
/
0:15
Full screen
Brainpower
Read More
What is true about Panorama managed firewalls?
A. Commit on local firewalls can be prohibited, which results in no configuration backups on
local firewalls.
B. By default, Panorama stores up to ten backups for each firewall.
C. By default, Panorama stores up to ten device states for each firewall.
D. After a commit on a local firewall, a backup is sent of its running configuration to Panorama.
,D
If the NGFW reboots before you commit your changes, how can you revert the candidate
configuration to the current snapshot to restore changes you made between the last commit and
the last snapshot?
A. revert to the last saved configuration
B. revert to the first saved configuration
C. reverse the saved config
D. Undo
A
What are two types of Security profiles? (Choose two.)
A. URL Filtering
B. Antivirus
C. Spyware Filtering
D. File Filtering
AB
PAN-OS® software supports which two authentication types? (Choose two.)
A. Token
B. LMS
C. kerberos
D. RADIUS
CD
Which Layer 2 interfaces can be used to switch traffic between VLANs?
A. Tap interfaces
B. other Layer 2 interfaces
C. other subnets
D. Layer 2 and 3 interfaces
B
How often are new antivirus signatures published?
A. weekly
B. monthly
C. hourly
D. daily
D
,An administrator is reviewing the security policy configuration and notices that the policy to
block traffic to an internal web server uses the reset-both action. What are two potential risks
associated with the reset-both Security policy action? (Choose two.)
A. Sending a reset allows the TCP session to send data, which may allow malicious traffic.
B. Sending a reset can facilitate malicious use such as reverse mapping through port scanning.
C. Sending a reset yields a poor end-user experience.
D. Sending a reset will consume server resources with half-open sockets.
AB
Which two agents can be used to monitor servers and gather User-ID information? (Choose
two.)
A. Windows-based client
B. Traps agent
C. Built-in agent inside the PAN-OS® firewall
D. Cortex Data Lake
AC
Which license must an administrator acquire prior to downloading Antivirus updates for use with
the firewall?
A. Antivirus
B. WildFire
C. Threat Prevention
D. URL Filtering
C
You receive notification about a new malware that infects hosts. An infection results in the
infected host attempting to contact a command-and-control server. Which Security Profile, when
applied to outbound Security policy rules, detects and prevents this threat from establishing a
command-and-control connection?
A. Anti-Spyware Profile
B. Data Filtering Profile
C. Antivirus Profile
D. Vulnerability Protection Profile
A
How often are new and modified threat signatures and modified application signatures
published?
A. hourly
B. monthly
, C. weekly
D. daily
C
What are two predefined anti-spyware profiles? (Choose two.)
A. Secure
B. Standard
C. Strict
D. Default
CD
What are two dynamic roles? (Choose two.)
A. Dynamic User
B. Device User
C. Superuser
D. Device Administrator
CD
Based on the Security policy rules shown, SSH will be allowed on which port?
A. any port
B. the default port
C. same port as ssl and snmpv3
D. port 443 or 161
B
What is the percentage of malware that is estimated to use DNS for Command and Control (C2)
procedures?
A. 50%
B. 10%
C. 25%
D. 80%
D
During the packet flow process, which two processes are performed in application identification?
(Choose two.)
A. session application identified
B. pattern-based application identification
C. application changed from content inspection
D. application override policy match
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Legitexams. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $10.49. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
81503 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now