Exam (elaborations)
PCNSA Study Guide - Complete (Q’s & A’s)
PCNSA Study Guide - Complete (Q’s & A’s)
[Show more]
Content preview
PCNSA Study Guide - Complete (Q’s & A’s)Prevention Posture Assessment (PPA) - ✔️ The PPA is a set of
questionnaires that help uncover security risk prevention gaps across all
areas of network and security architecture. The PPA not only helps to
identify all security risks, it also provides detailed suggestions on how to
prevent the risks and close the gaps. The assessment, guided by an
experienced Palo Alto Networks sales engineer, helps determine the areas
of greatest risk where you should focus prevention activities. You can run
the PPA on firewalls and on Panorama.
Best Practice Assessment (BPA) Tool - ✔️ The BPA for next-
generation firewalls and Panorama evaluates a device's configuration by
measuring the adoption of capabilities, validating whether the policies
adhere to best practices, and providing recommendations and instructions
for how to remediate failed best practice checks.
The Security Policy Adoption Heatmap component filters the information
by device groups, serial numbers, zones, areas of architecture, and other
categories. The results include trending data, which shows the rate of
security improvement as you adopt new capabilities, fix gaps, and progress
toward a Zero-Trust network.
The BPA component performs more than 200 security checks on a firewall
or Panorama configuration and provides a pass/fail score for each check.
Each check is a best practice identified by Palo Alto Networks security
experts. If a check returns a failing score, the tool provides the justification
for the failing score and how to fix the issue.
In anti-malware, what does false positive mean? - ✔️ a false
positive incorrectly identifies a legitimate file or application as malware
In anti-malware, what does false negative mean? - ✔️ a false
negative incorrectly identifies malware as a legitimate file or application
Software as a Service (SaaS) - ✔️ Customers are provided access
to an application running on a cloud infrastructure. The application is
accessible from various client devices and interfaces, but the customer has
no knowledge of, and does not manage or control, the underlying cloud
infrastructure. The customer may have access to limited user-specific
, application settings, and security of the customer data is still the
responsibility of the customer.
Platform as a Service (PaaS) - ✔️ Customers can deploy
supported applications onto the providers cloud infrastructure, but the
customer has no knowledge of, and does not manage or control, the
underlying cloud infrastructure. The customer has control over the
deployed applications and limited configuration settings for the
application-hosting environment. The company owns the deployed
applications and data, it is therefore responsible for the security of those
applications and data.
Infrastructure as a Service (IaaS) - ✔️ Customers can provision
processing, storage, networks, and other computing resources and deploy
and run operating systems and applications. However, the customer has no
knowledge of, and does not manage or control, the underlying cloud
infrastructure. The customer has control over operating systems, storage,
and deployed applications, along with some networking components (for
example, host firewalls). The company owns deployed applications and
data, and it is therefore responsible for the security of those applications
and data.
Palo Alto Networks Security Operating Platform - ✔️ is a purpose
built, fully integrated cybersecurity approach that helps organizations get
control of their networks and protect critical assets
Which three options are key components of Security Operating Platform?
- ✔️ 1- Network Security
2- Advanced Endpoint Protection
3- Cloud Security
What are the essential functional requirements for an effective NGFW
include? - ✔️ 1- Application Identification - Accurately identify
applications regardless of port, protocol, evasive techniques or encryption.
Provide visibility of applications and granular policy-based control over
applications, including individual application functions.
2- User identification - Accurately identify users and subsequently use
identity information as an attribute for policy control.
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Studyhall. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for CA$14.42. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
62890 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now