Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 221:

  Which link in the web interface enables a security administrator to view the security policy rules that match new application signatures?

  A. Review Apps
  B. Review App Matches
  C. Pre-analyze
  D. Review Policies
  D. Review Policies

• Question 222:

  What do you configure if you want to set up a group of objects based on their ports alone?

  A. Application groups
  B. Service groups
  C. Address groups
  D. Custom objects
  B. Service groups

• Question 223:

  What are three ways application characteristics are used? (Choose three.)

  A. As a setting to define a new custom application
  B. As a global filter in the Application Command Center (ACC)
  C. As an attribute to define an application group
  D. As an object to define Security policies
  E. As an attribute to define an application filter
  A. As a setting to define a new custom application
  B. As a global filter in the Application Command Center (ACC)
  E. As an attribute to define an application filter

  ---

  Explanation/Reference:

• Question 224:

  Which verdict may be assigned to a WildFire sample?

  A. Phishing
  B. Spyware
  C. PUP
  D. Malware
  D. Malware

  ---

  Explanation/Reference:

  Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/AppScan_Integrations/GUID-AWT-WILDFIRE-OVERVIEW-INTRO.html

• Question 225:

  

  Given the detailed log information above, what was the result of the firewall traffic inspection?

  A. It was blocked by the Anti-Virus Security profile action.
  B. It was blocked by the Anti-Spyware Profile action.
  C. It was blocked by the Vulnerability Protection profile action.
  D. It was blocked by the Security policy action.
  B. It was blocked by the Anti-Spyware Profile action.

• Question 226:

  To protect against illegal code execution, which Security profile should be applied?

  A. Antivirus profile on allowed traffic
  B. Antivirus profile on denied traffic
  C. Vulnerability Protection profile on allowed traffic
  D. Vulnerability Protection profile on denied traffic
  C. Vulnerability Protection profile on allowed traffic

  ---

  Explanation/Reference:

• Question 227:

  Which interface type requires no routing or switching but applies Security or NAT policy rules before passing allowed traffic?

  A. Layer 3
  B. Virtual Wire
  C. Tap
  D. Layer 2
  A. Layer 3

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/nat/nat-policy-rules/nat-policy-overview

• Question 228:

  Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT.

  

  Which Security policy rule will allow traffic to flow to the web server?

  A. Untrust (any) to DMZ (10.1.1.100), web browsing -Allow
  B. Untrust (any) to Untrust (1.1.1.100), web browsing - Allow
  C. Untrust (any) to Untrust (10.1.1.100), web browsing -Allow
  D. Untrust (any) to DMZ (1.1.1.100), web browsing - Allow
  D. Untrust (any) to DMZ (1.1.1.100), web browsing - Allow

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/nat/nat- configuration-examples/destination-nat-exampleone-to-one-mapping

• Question 229:

  What is the purpose of the automated commit recovery feature?

  A. It reverts the Panorama configuration.
  B. It causes HA synchronization to occur automatically between the HA peers after a push from Panorama.
  C. It reverts the firewall configuration if the firewall recognizes a loss of connectivity to Panorama after the change.
  D. It generates a config log after the Panorama configuration successfully reverts to the last running configuration.
  C. It reverts the firewall configuration if the firewall recognizes a loss of connectivity to Panorama after the change.

  ---

  Explanation/Reference:

  Reference:https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/administer- panorama/enable-automated-commit-recovery.html

• Question 230:

  An administrator is reviewing another administrator s Security policy log settings. Which log setting configuration is consistent with best practices tor normal traffic?

  A. Log at Session Start and Log at Session End both enabled
  B. Log at Session Start disabled Log at Session End enabled
  C. Log at Session Start enabled Log at Session End disabled
  D. Log at Session Start and Log at Session End both disabled
  B. Log at Session Start disabled Log at Session End enabled