Palo Alto Networks Palo Alto Networks Certifications PCNSA Questions & Answers

• Question 121:

  Which type of profile must be applied to the Security policy rule to protect against buffer overflows illegal code execution and other attempts to exploit system flaws?

  A. anti-spyware

  B. URL filtering

  C. vulnerability protection

  D. file blocking

  Correct Answer: C

  Reference:https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface- help/objects/objects-security-profiles-vulnerability-protection.html

  Vulnerability Protection Security Profiles protect against threats entering the network. For example, Vulnerability Protection Security Profiles protect against buffer overflows, illegal code execution, and other attempts to exploit system vulnerabilities. The default Vulnerability Protection Security Profile protects clients and servers from all known critical-, high-, and medium-severity threats. You also can create exceptions that enable you to change the response to a specific signature.

• Question 122:

  How many zones can an interface be assigned with a Palo Alto Networks firewall?

  A. two

  B. three

  C. four

  D. one

  Correct Answer: D

• Question 123:

  Which verdict may be assigned to a WildFire sample?

  A. Phishing

  B. Spyware

  C. PUP

  D. Malware

  Correct Answer: A

• Question 124:

  To protect against illegal code execution, which Security profile should be applied?

  A. Antivirus profile on allowed traffic

  B. Antivirus profile on denied traffic

  C. Vulnerability Protection profile on allowed traffic

  D. Vulnerability Protection profile on denied traffic

  Correct Answer: C

• Question 125:

  The PowerBall Lottery has reached an unusually high value this week. Your company has decided to raise morale by allowing employees to access the PowerBall Lottery website (www.powerball.com) for just this week. However, the company does not want employees to access any other websites also listed in the URL filtering "gambling" category.

  Which method allows the employees to access the PowerBall Lottery website but without unblocking access to the "gambling" URL category?

  A. Add just the URL www.powerball.com to a Security policy allow rule.

  B. Manually remove powerball.com from the gambling URL category.

  C. Add *.powerball.com to the URL Filtering allow list.

  D. Create a custom URL category, add *.powerball.com to it and allow it in the Security Profile.

  Correct Answer: A

• Question 126:

  Which firewall plane provides configuration, logging, and reporting functions on a separate processor?

  A. control

  B. network processing

  C. data

  D. security processing

  Correct Answer: A

• Question 127:

  Which protocol used to map username to user groups when user-ID is configured?

  A. SAML

  B. RADIUS

  C. TACACS+

  D. LDAP

  Correct Answer: D

• Question 128:

  Which User Credential Detection method should be applied within a URL Filtering Security profile to check for the submission of a valid corporate username and the associated password?

  A. Domain Credential

  B. IP User

  C. Group Mapping

  D. Valid Username Detected Log Severity

  Correct Answer: C

• Question 129:

  What is the purpose of the automated commit recovery feature?

  A. It reverts the Panorama configuration.

  B. It causes HA synchronization to occur automatically between the HA peers after a push from Panorama.

  C. It reverts the firewall configuration if the firewall recognizes a loss of connectivity to Panorama after the change.

  D. It generates a config log after the Panorama configuration successfully reverts to the last running configuration.

  Correct Answer: C

  Reference:https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/administer- panorama/enable-automated-commit-recovery.html

• Question 130:

  Which service protects cloud-based applications such as Dropbox and Salesforce by administering permissions and scanning files for sensitive information?

  A. Aperture

  B. AutoFocus

  C. Parisma SaaS

  D. GlobalProtect

  Correct Answer: C