[2022] PCNSA Actual Exam Dumps, PCNSA Practice Test [Q34-Q49]

Rate this post

[2022] PCNSA Actual Exam Dumps, PCNSA Practice Test

ExamBoosts PCNSA dumps & Paloalto Network Security Administrator sure practice dumps

Palo Alto Networks Certified Network Security Administrator PCNSA Exam

Palo Alto Networks Certified Network Security Administrator PCNSA Exam is related to Palo Alto Networks Firewalls to Protect Networks from Cutting Edge Cyber Threats. PCNSA User Interface Designer exam is suitable for Network Engineers. It validates the Candidate ability to configure central features of Palo Alto Networks Next-Generation Firewall, the capability to effectively deploy the Firewalls to enable network traffic. Network Engineer usually holds or pursue this certification and you can expect the same job role after completion of this certification.

NO.34 Based on the graphic which statement accurately describes the output shown in the server monitoring panel?

The host lab-client has been found by a domain controller.

The host lab-client has been by the User-ID agent.

The User-ID agent is connected to a domain controller labeled lab client.

NO.35 An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated?
(Choose two.)

vulnerability protection profile applied to outbound security policies

anti-spyware profile applied to outbound security policies

antivirus profile applied to outbound security policies

URL filtering profile applied to outbound security policies

NO.36 Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.

Exploitation

Installation

Reconnaissance

Act on Objective

NO.37 Match the Cyber-Attack Lifecycle stage to its correct description.

NO.38 Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.

Exploitation

Installation

Reconnaissance

Act on Objective

NO.39 Based on the screenshot what is the purpose of the included groups?

They are only groups visible based on the firewall’s credentials.

They are used to map usernames to group names.

They contain only the users you allow to manage the firewall.

They are groups that are imported from RADIUS authentication servers.

NO.40 Match the Palo Alto Networks Security Operating Platform architecture to its description.

NO.41 Which type security policy rule would match traffic flowing between the inside zone and outside zone within the inside zone and within the outside zone?

global

universal

intrazone

interzone

NO.42 Order the steps needed to create a new security zone with a Palo Alto Networks firewall.

Explanation
Step 1 – Select network tab
Step 2 – Select zones from the list of available items
Step 3 – Select Add
Step 4 – Specify Zone Name
Step 5 – Specify Zone Type
Step 6 – Assign interfaces as needed

NO.43 Which statement is true regarding a Best Practice Assessment?

The BPA tool can be run only on firewalls

It provides a percentage of adoption for each assessment data

The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus prevention activities

It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

NO.44 Based on the security policy rules shown, ssh will be allowed on which port?

NO.45 Given the image, which two options are true about the Security policy rules. (Choose two.)

The Allow Office Programs rule is using an Application Filter

In the Allow FTP to web server rule, FTP is allowed using App-ID

The Allow Office Programs rule is using an Application Group

In the Allow Social Networking rule, allows all of Facebook’s functions

NO.46 Match the network device with the correct User-ID technology.

Explanation
Microsoft Exchange – Server monitoring
Linux authentication – syslog monitoring
Windows Client – client probing
Citrix client – Terminal Services agent

NO.47 Match the Palo Alto Networks Security Operating Platform architecture to its description.

NO.48 What is the minimum timeframe that can be set on the firewall to check for new WildFire signatures?

every 30 minutes

every 5 minutes

once every 24 hours

every 1 minute

Because new WildFire signatures are now available every five minutes, it is a best practice to use this setting to ensure the firewall retrieves these signatures within a minute of availability.

NO.49 An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory

Create an Application Group and add business-systems to it

Create an Application Filter and name it Office Programs, then filter it on the business-systems category

Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office An application filter is an object that dynamically groups applications based on application attributes that you define, including category, subcategory, technology, risk factor, and characteristic. This is useful when you want to safely enable access to applications that you do not explicitly sanction, but that you want users to be able to access. For example, you may want to enable employees to choose their own office programs (such as Evernote, Google Docs, or Microsoft Office 365) for business use. To safely enable these types of applications, you could create an application filter that matches on the Category business-systems and the Subcategory office-programs. As new applications office programs emerge and new App-IDs get created, these new applications will automatically match the filter you defined; you will not have to make any additional changes to your policy rulebase to safely enable any application that matches the attributes you defined for the filter.

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/use-application-objects-in -policy/create-an-application-filter.html

Loading …