Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 281:

  What must be configured before setting up Credential Phishing Prevention?

  A. Anti Phishing Block Page
  B. Threat Prevention
  C. Anti Phishing profiles
  D. User-ID
  B. Threat Prevention

  ---

  Explanation/Reference:

  https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat- prevention/prevent-credential-phishing/set-up-credential-phishing-prevention

• Question 282:

  An administrator receives a notification about new malware that is being used to attack hosts. The malware exploits a software bug in a common application. Which Security Profile will detect and block access to this threat after the administrator updates the firewall's threat signature database?

  A. Vulnerability Profile applied to inbound Security policy rules
  B. Antivirus Profile applied to outbound Security policy rules
  C. Data Filtering Profile applied to outbound Security policy rules
  D. Data Filtering Profile applied to inbound Security policy rules
  A. Vulnerability Profile applied to inbound Security policy rules

  ---

  Explanation/Reference:

• Question 283:

  Which feature would be useful for preventing traffic from hosting providers that place few restrictions on content, whose services are frequently used by attackers to distribute illegal or unethical material?

  A. Palo Alto Networks Bulletproof IP Addresses
  B. Palo Alto Networks CandC IP Addresses
  C. Palo Alto Networks Known Malicious IP Addresses
  D. Palo Alto Networks High-Risk IP Addresses
  A. Palo Alto Networks Bulletproof IP Addresses

  ---

  Explanation/Reference:

  To block hosts that use bulletproof hosts to provide malicious, illegal, and/or unethical content, use the bulletproof IP address list in policy. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/content-inspection- features/edl-for-bulletproof-isps#:~:text=A%20new%20built%2Din%20external,%2C%20illegal%2C%20and%20unethi cal%20content.

• Question 284:

  Review the screenshot below. Which statement is correct about the information it contains?

  

  A. Highlight Unused Rules is checked.
  B. Tunnel Traffic has the High Risk tag applied.
  C. There are six Security policy rules on this firewall.
  D. View Rulebase as Groups is checked.
  A. Highlight Unused Rules is checked.

  ---

  Explanation/Reference:

• Question 285:

  An administrator wishes to follow best practices for logging traffic that traverses the firewall Which log setting is correct?

  A. Disable all logging
  B. Enable Log at Session End
  C. Enable Log at Session Start
  D. Enable Log at both Session Start and End
  B. Enable Log at Session End

  ---

  Explanation/Reference:

  Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clt5CAC

• Question 286:

  An administrator is reviewing the Security policy rules shown in the screenshot. Why are the two fields in the Security policy EDL-Deny highlighted in red?

  

  A. Because antivirus inspection is enabled for this policy
  B. Because the destination zone, address, and device are all "any"
  C. Because the action is Deny
  D. Because the Security-EDL tag has been assigned the red color
  D. Because the Security-EDL tag has been assigned the red color

  ---

  Explanation/Reference:

• Question 287:

  In the example security policy shown, which two websites fcked? (Choose two.)

  

  A. LinkedIn
  B. Facebook
  C. YouTube
  D. Amazon
  A. LinkedIn
  B. Facebook

• Question 288:

  Which profile must be applied to the Security policy rule to block spyware on compromised hosts from trying to phone-home or beacon out to external command-and-control (C2) servers?

  A. Anti-spyware
  B. File blocking
  C. WildFire
  D. URL filtering
  A. Anti-spyware

  ---

  Explanation/Reference:

• Question 289:

  What is a prerequisite before enabling an administrative account which relies on a local firewall user database?

  A. Configure an authentication policy
  B. Configure an authentication sequence
  C. Configure an authentication profile
  D. Isolate the management interface on a dedicated management VLAN
  C. Configure an authentication profile

• Question 290:

  Which Security profile would you apply to identify infected hosts on the protected network using DNS traffic?

  A. URL traffic
  B. vulnerability protection
  C. anti-spyware
  D. antivirus
  C. anti-spyware