Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 91:

  An administrator is configuring a NAT rule.

  At a minimum, which three forms of information are required? (Choose three.)

  A. name
  B. source zone
  C. destination interface
  D. destination address
  E. destination zone
  A. name
  B. source zone
  E. destination zone

• Question 92:

  Where within the URL Filtering security profile must a user configure the action to prevent credential submissions?

  A. URL Filtering > Categories
  B. URL Filtering > URL Filtering Settings
  C. URL Filtering > Inline Categorization
  D. URL Filtering > HTTP Header Insertion
  A. URL Filtering > Categories

  ---

  Explanation/Reference:

• Question 93:

  Why does a company need an Antivirus profile?

  A. To prevent command-and-control traffic
  B. To protect against viruses, worms, and trojans
  C. To prevent known exploits
  D. To prevent access to malicious web content
  B. To protect against viruses, worms, and trojans

• Question 94:

  What is the function of an application group object?

  A. It contains applications that you want to treat similarly in policy
  B. It groups applications dynamically based on application attributes that you define
  C. It represents specific ports and protocols for an application
  D. It identifies the purpose of a rule or configuration object and helps you better organize your rulebase
  A. It contains applications that you want to treat similarly in policy

  ---

  Explanation/Reference:

• Question 95:

  Which statement is true regarding a Prevention Posture Assessment?

  A. The Security Policy Adoption Heatmap component filters the information by device groups, serial numbers, zones, areas of architecture, and other categories
  B. It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture
  C. It provides a percentage of adoption for each assessment area
  D. It performs over 200 security checks on Panorama/firewall for the assessment
  B. It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

• Question 96:

  An administrator wants to filter access to www.paloaltonetworks.com via a custom URL category. Which syntax would match this?

  A. https://paloaltonetworks.com
  B. #.paloaltonetworks.com
  C. http://paloaltonetworks.com
  D. *.paloaltonetworks.com
  D. *.paloaltonetworks.com

• Question 97:

  Which Security profile must be added to Security policies to enable DNS Signatures to be checked?

  A. Anti-Spyware
  B. Antivirus
  C. Vulnerability Protection
  D. URL Filtering
  A. Anti-Spyware

  ---

  Explanation/Reference:

  "In addition, you can enable the DNS sinkholing action in Anti-Spyware profiles to enable the firewall to forge a response to a DNS query for a known malicious domain, causing the malicious domain name to resolve to an IP address that you define" https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/policy/security-profiles

• Question 98:

  Which license must an Administrator acquire prior to downloading Antivirus Updates for use with the firewall?

  A. Threat Prevention License
  B. Threat Implementation License
  C. Threat Environment License
  D. Threat Protection License
  A. Threat Prevention License

• Question 99:

  Which two features can be used to tag a username so that it is included in a dynamic user group? (Choose two.)

  A. GlobalProtect agent
  B. XML API
  C. User-ID Windows-based agent
  D. log forwarding auto-tagging
  B. XML API
  C. User-ID Windows-based agent

• Question 100:

  An administrator reads through the following Applications and Threats Content Release Notes before an update:

  

  Which rule would continue to allow the file upload to confluence after the update?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

  ---

  Explanation/Reference:

  https://live.paloaltonetworks.com/t5/blogs/what-is-application-dependency/ba-p/344330