Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 381:

  An administrator wants to prevent users from unintentionally accessing malicious domains where data can be exfiltrated through established connections to remote systems. From the Pre-defined Categories tab within the URL Filtering profile, what is the right configuration to prevent such connections?

  A. Set the hacking category to continue.
  B. Set the phishing category to override.
  C. Set the malware category to block.
  D. Set the Command and Control category to block.
  D. Set the Command and Control category to block.

  ---

  Explanation/Reference:

• Question 382:

  Which type of security rule will match traffic between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?

  A. global
  B. intrazone
  C. interzone
  D. universal
  D. universal

  ---

  Explanation/Reference:

  References: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000 00ClomCAC

• Question 383:

  URL categories can be used as match criteria on which two policy types? (Choose two.)

  A. authentication
  B. decryption
  C. application override
  D. NAT
  A. authentication
  B. decryption

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/url- filtering-concepts/url-category-as-policy-match-criteria.html

• Question 384:

  Which rule type is appropriate for matching traffic both within and between the source and destination zones?

  A. interzone
  B. shadowed
  C. intrazone
  D. universal
  D. universal

  ---

  Explanation/Reference:

• Question 385:

  Which two actions are needed for an administrator to get real-time WildFire signatures? (Choose two.)

  A. Enable Dynamic Updates.
  B. Obtain a Threat Prevention subscription.
  C. Obtain a WildFire subscription.
  D. Move within the WildFire public cloud region.
  A. Enable Dynamic Updates.
  C. Obtain a WildFire subscription.

  ---

  Explanation/Reference:

• Question 386:

  An administrator wants to prevent hacking attacks through DNS queries to malicious domains.

  Which two DNS policy actions can the administrator choose in the Anti-Spyware Security Profile? (Choose two.)

  A. deny
  B. block
  C. sinkhole
  D. override
  B. block
  C. sinkhole

• Question 387:

  Which stage of the cyber-attack lifecycle makes it important to provide ongoing education to users on spear phishing links, unknown emails, and risky websites?

  A. reconnaissance
  B. delivery
  C. exploitation
  D. installation
  B. delivery

  ---

  Explanation/Reference:

  Weaponization and Delivery: Attackers will then determine which methods to use in order to deliver malicious payloads. Some of the methods they might utilize are automated tools, such as exploit kits, spear phishing attacks with malicious

  links, or attachments and malvertizing.

  Gain full visibility into all traffic, including SSL, and block high-risk applications. Extend those protections to remote and mobile devices. Protect against perimeter breaches by blocking malicious or risky websites through URL filtering. Block

  known exploits, malware and inbound command-and-control communications using multiple threat prevention disciplines, including IPS, anti- malware, anti-CnC, DNS monitoring and sinkholing, and file and content blocking. Detect unknown

  malware and automatically deliver protections globally to thwart new attacks.

  Provide ongoing education to users on spear phishing links, unknown emails, risky websites, etc.

  https://www.paloaltonetworks.com/cyberpedia/how-to-break-the-cyber-attack-lifecycle

• Question 388:

  What are three valid ways to map an IP address to a username? (Choose three.)

  A. using the XML API
  B. DHCP Relay logs
  C. a user connecting into a GlobalProtect gateway using a GlobalProtect Agent
  D. usernames inserted inside HTTP Headers
  E. WildFire verdict reports
  A. using the XML API
  C. a user connecting into a GlobalProtect gateway using a GlobalProtect Agent
  D. usernames inserted inside HTTP Headers

• Question 389:

  Which type security policy rule would match traffic flowing between the inside zone and outside zone within the inside zone and within the outside zone?

  A. global
  B. universal
  C. intrazone
  D. interzone
  B. universal

• Question 390:

  Which two Palo Alto Networks security management tools provide a consolidated creation of policies, centralized management and centralized threat intelligence. (Choose two.)

  A. GlobalProtect
  B. Panorama
  C. Aperture
  D. AutoFocus
  B. Panorama
  D. AutoFocus