Which Security policy set should be used to ensure that a policy is applied first?
A. Local firewall policy
B. Shared pre-rulebase
C. Parent device-group pre-rulebase
D. Child device-group pre-rulebase
An administrator is trying to implement an exception to an external dynamic list manually. Some entries are shown underlined in red.
What would cause this error?
A. Entries contain symbols.
B. Entries are wildcards.
C. Entries contain regular expressions.
D. Entries are duplicated.
Which Security profile can be used to detect and block compromised hosts from trying to communicate with external command-and-control (C2) servers?
A. URL Filtering
B. Antivirus
C. Vulnerability
D. Anti-Spyware
If the firewall interface E1/1 is connected to a SPAN or mirror port, which interface type should E1/1 be configured as?
A. Tap
B. Virtual Wire
C. Layer 2
D. Layer 3
An administrator manages a network with 300 addresses that require translation. The administrator configured NAT with an address pool of 240 addresses and found that connections from addresses that needed new translations were being dropped.
Which type of NAT was configured?
A. Dynamic IP
B. Static IP
C. Dynamic IP and Port
D. Destination NAT
The NetSec Manager asked to create a new EMEA Regional Panorama Administrator profile with customized privileges. In particular, the new EMEA Regional Panorama Administrator should be able to:
1.
Access only EMEA-Regional device groups with read-only privileges.
2.
Access only EMEA-Regional templates with read-only privileges.
What is the correct configuration for the new EMEA Regional Panorama Administrator profile?
A. Administrator Type = Device Group and Template Admin Admin Role = EMEA_Regional_Admin_read_only Access Domain = EMEA-Regional
B. Administrator Type = Dynamic Admin Role = Superuser (read-only)
C. Administrator Type = Dynamic Admin Role = Panorama Administrator
D. Administrator Type = Custom Panorama Admin Profile = EMEA Regional Admin_read_only
In order to fulfill the corporate requirement to backup the configuration of Panorama and the Panorama-managed firewalls securely, which protocol should you select when adding a new scheduled config export?
A. HTTPS
B. SMB v3
C. SCP
D. FTP
An administrator wants to prevent users from unintentionally accessing malicious domains where data can be exfiltrated through established connections to remote systems. From the Pre-defined Categories tab within the URL Filtering profile, what is the right configuration to prevent such connections?
A. Set the hacking category to continue.
B. Set the phishing category to override.
C. Set the malware category to block.
D. Set the Command and Control category to block.
With the DNS Security subscription, when will the cloud-based signature database provide users access to newly added DNS signatures?
A. Within five minutes, after downloading updates
B. Instantly, after downloading updates
C. Within five minutes, without downloading updates
D. Instantly, without downloading updates
Which type of policy allows an administrator to both enforce rules and take action?
A. Authentication
B. Security
C. NAT
D. Decryption
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Palo Alto Networks exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your PCNSA exam preparations and Palo Alto Networks certification application, do not hesitate to visit our Vcedump.com to find your solutions here.