Palo Alto Networks Palo Alto Networks Certifications PCNSA Questions & Answers

• Question 441:

  Starting with PAN-OS version 9.1, application dependency information is now reported in which two locations? (Choose two.)

  A. on the App Dependency tab in the Commit Statuswindow

  B. on the Policy Optimizer'sRule Usagepage

  C. ontheApplication tab in the Security Policy Rulecreation window

  D. ontheObjects>Applicationsbrowser pages

  Correct Answer: AC

  Reference:https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/app-id/use- application-objects-in-policy/resolve-application-dependencies.html

• Question 442:

  After making multiple changes to the candidate configuration of a firewall, the administrator would like to start over with a candidate configuration that matches the running configuration. Which command in Device > Setup > Operations would provide the most operationally efficient way to accomplish this?

  A. Import named config snapshot

  B. Load named configuration snapshot

  C. Revert to running configuration

  D. Revert to last saved configuration

  Correct Answer: C

• Question 443:

  Which security policy match condition would an administrator use to block traffic to IP addresses on the Palo Alto Networks Bulletproof IP Addresses list?

  A. source address

  B. destination address

  C. source zone

  D. destination zone

  Correct Answer: B