Which order of steps is the correct way to create a static route?

1) Enter the route and netmask 2) Specify the outgoing interface for packets to use to go to the next hop 3) Enter the IP address for the specific next hop 4) Add an IPv4 or IPv6 route by name

1) Enter the IP address for the specific next hop 2) Enter the route and netmask 3) Add an IPv4 or IPv6 route by name 4) Specify the outgoing interface for packets to use to go to the next hop

1) Enter the route and netmask 2) Enter the IP address for the specific next hop 3) Specify the outgoing interface for packets to use to go to the next hop 4) Add an IPv4 or IPv6 route by name

1) Enter the IP address for the specific next hop 2) Add an IPv4 or IPv6 route by name 3) Enter the route and netmask 4) Specify the outgoing interface for packets to use to go to the next hop

Which two statements correctly describe how pre-rules and local device rules are viewed and modified?

Pre-rules are modified in Panorama only, and local device rules are modified on local firewalls only

Pre-rules can be viewed on managed firewalls.

Pre-rules can be modified by the local administrator or by a Panorama administrator who has switched to a local firewall.

Pre-rules and local device rules can be modified in Panorama.

An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic. Which two Security policy rules will accomplish this configuration? (Choose two.)

Untrust (Any) to DMZ (1.1.1.100), ssh - Allow

Untrust (Any) to DMZ (1.1.1.100), web-browsing - Allow

Untrust (Any) to Untrust (10.1.1.1), web-browsing -Allow

Untrust (Any) to Untrust (10.1.1.1), ssh -Allow

Untrust (Any)to DMZ (10.1.1.100. 10.1.1.101), ssh, web-browsing-Allow

An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. The interzone-default was never changed from its default configuration. Why doesn't the administrator see the traffic?

Logging on the interzone-default policy is disabled

Traffic is being denied on the interzone-default policy.

The Log Forwarding profile is not configured on the policy.

The interzone-default policy is disabled by default

What are three valid ways to map an IP address to a username? (Choose three.)

a user connecting into a GlobalProtect gateway using a GlobalProtect Agent

usernames inserted inside HTTP Headers

Which two statements are true for the DNS security service introduced in PAN-OS version 10.0?

It functions like PAN-DB and requires activation through the app portal

IT is automatically enabled and configured

It removes the 100K limit for DNS entries for the downloaded DNS updates

IT eliminates the need for dynamic DNS updates

Which administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact and command-and-control (C2) server. Which security profile components will detect and prevent this threat after the firewall`s signature database has been updated?

antivirus profile applied to outbound security policies

data filtering profile applied to inbound security policies

data filtering profile applied to outbound security policies

vulnerability profile applied to inbound security policies

Complete the statement. A security profile can block or allow traffic

after it is matched by a security policy that allows traffic

on unknown-tcp or unknown-udp traffic

before it is matched by a security policy

after it is matched by a security policy that allows or blocks traffic

The compliance officer requests that all evasive applications need to be blocked on all perimeter firewalls out to the internet The firewall is configured with two zones; * 1. trust for internal networks * 2. untrust to the internet Based on the capabilities of the Palo Alto Networks NGFW, what are two ways to configure a security policy using App-ID to comply with this request? (Choose two )

Create a deny rule at the top of the policy from trust to untrust over any service and add an application filter with the evasive characteristic

Create a deny rule at the top of the policy from trust to untrust with service application-default and add an application filter with the evasive characteristic

Create a deny rule at the top of the policy from trust to untrust over any service and select evasive as the application

Create a deny rule at the top of the policy from trust to untrust with service application-default and select evasive as the application

An administrator is reviewing another administrator s Security policy log settings Which log setting configuration is consistent with best practices tor normal traffic?

Log at Session Start disabled Log at Session End enabled

Log at Session Start and Log at Session End both enabled

Log at Session Start enabled Log at Session End disabled

Log at Session Start and Log at Session End both disabled

An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command_x0002_and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated? (Choose two.)

anti-spyware profile applied to outbound security policies

URL filtering profile applied to outbound security policies

vulnerability protection profile applied to outbound security policies

antivirus profile applied to outbound security policies

Why does a company need an Antivirus profile?

To protect against viruses, worms, and trojans

To prevent command-and-control traffic

To prevent access to malicious web content

After making multiple changes to the candidate configuration of a firewall, the administrator would like to start over with a candidate configuration that matches the running configuration. Which command in Device > Setup > Operations would provide the most operationally efficient way to accomplish this?

Revert to running configuration

Load named configuration snapshot

Revert to last saved configuration

Which User-ID mapping method should be used for an environment with clients that do not authenticate to Windows Active Directory?

Windows session monitoring via a domain controller

passive server monitoring using the Windows-based agent

passive server monitoring using a PAN-OS integrated User-ID agent

What is the purpose of the automated commit recovery feature?

It reverts the firewall configuration if the firewall recognizes a loss of connectivity to Panorama after the change

It reverts the Panorama configuration

It causes HA synchronization to occur automatically between the HA peers after a push from Panorama

It generates a config log after the Panorama configuration successfully reverts to the last running configuration

You need to allow users to access the office–suite application of their choice. How should you configure the firewall to allow access to any office-suite application?

Create an Application Filter and name it Office Programs, then filter it on the office programs subcategory

Create an Application Group and add Office 365, Evernote Google Docs and Libre Office

Create an Application Group and add business-systems to it

Create an Application Filter and name it Office Programs then filter on the business-systems category

Which statement is true about Panorama managed devices?

Local configuration locks prohibit Security policy changes for a Panorama managed device

Panorama automatically removes local configuration locks after a commit from Panorama

Security policy rules configured on local firewalls always take precedence

Local configuration locks can be manually unlocked from Panorama

An administrator would like to create a URL Filtering log entry when users browse to any gambling website. What combination of Security policy and Security profile actions is correct?

Security policy = allow, Gambling category in URL profile = alert

Security policy = drop, Gambling category in URL profile = allow

Security policy = deny, Gambling category in URL profile = block

Security policy = allow, Gambling category in URL profile = allow

Which path in PAN-OS 10.0 displays the list of port-based security policy rules?

Policies> Security> Rule Usage> No App Specified

Policies> Security> Rule Usage> Port only specified

Policies> Security> Rule Usage> Port-based Rules

Policies> Security> Rule Usage> Unused Apps

PCNSA EXAM TRYOUT

Authored by fitranto dev

Computers

Professional Development

Used 5+ times

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View
Student View

70 questions

Show all answers

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Within an Anti-Spyware security profile, which tab is used to enable machine learning based engines?

Signature Exceptions

Signature Policies

Machine Learning Policies

Inline Cloud Analysis

MULTIPLE SELECT QUESTION

30 sec • 1 pt

What are three ways application characteristics are used? (Choose three.)

As an attribute to define an application group

As a global filter in the Application Command Center (ACC)

As an attribute to define an application filter

As a setting to define a new custom application

As an object to define Security policies

MULTIPLE SELECT QUESTION

30 sec • 1 pt

Which two features implement one-to-one translation of a source IP address while allowing the source port to change? (Choose two.)

Dynamic IP/Port Fallback

Static IP

Dynamic IP

Dynamic IP and Port (DIPP)

MULTIPLE CHOICE QUESTION

1 min • 1 pt

Which statement applies to Antivirus Dynamic Updates?

When the firewall downloads and installs each new antivirus version in order, it shows as a full update.

They are released every 48 hours.

They include signatures for newly discovered malware.

When the firewall does not download and install a new antivirus version in order, it shows as an incremental update.

MULTIPLE SELECT QUESTION

5 mins • 1 pt

What are the two main reasons a custom application is created? (Choose two.)

To visually group similar applications

To correctly identify an internal application in the traffic log

To change the default categorization of an application

To reduce unidentified traffic on a network

MULTIPLE SELECT QUESTION

5 mins • 1 pt

A network administrator creates an intrazone security policy rule on a NGFW. The source zones are set to IT, Finance, and HR. To which two types of traffic will the rule apply? (Choose two.)

Within zone HR

Between zone IT and zone HR

Within zone IT

Between zone IT and zone Finance

MULTIPLE SELECT QUESTION

5 mins • 1 pt

Which two actions are needed for an administrator to get real-time WildFire signatures? (Choose two.)

Move within the WildFire public cloud region.

Obtain a Threat Prevention subscription.

Enable Dynamic Updates.

Obtain a WildFire subscription.

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Microsoft

or continue with

Facebook

Apple

Others

By signing up, you agree to our Terms of Service & Privacy Policy

Already have an account?

Similar Resources on Wayground

70 questions

Cuestionario de Ciberseguridad

Quiz

•

Professional Development

65 questions

SF App Builder (P1)

Quiz

•

Professional Development

Popular Resources on Wayground

6 questions

PRIDE Always and Everywhere

Presentation

•

12th Grade

20 questions

Lab Safety Quiz

Quiz

•

6th Grade

26 questions

KOR Review Kahoot Questions

Quiz

•

8th Grade

21 questions

Continents and Oceans

Quiz

•

6th Grade

12 questions

Unit Zero lesson 2 cafeteria

Presentation

•

9th - 12th Grade

20 questions

Parts of Speech

Quiz

•

5th Grade

10 questions

Riddles Riddles fun Riddles

Quiz

•

6th - 12th Grade

16 questions

Subject & Predicate

Quiz

•

5th Grade

Discover more resources for Computers

10 questions

Soup, Salad, or Sandwich?

Quiz

•

1st Grade - Professio...

20 questions

Employability Skills

Quiz

•

Professional Development

9 questions

How to Email your Teacher

Quiz

•

Professional Development

25 questions

2023 Pop Culture Trivia

Quiz

•

Professional Development

20 questions

Cinema Camera Angles

Quiz

•

9th Grade - Professio...

20 questions

Sports trivia

Quiz

•

Professional Development

21 questions

Shop Safety

Quiz

•

Professional Development

PCNSA EXAM TRYOUT

Within an Anti-Spyware security profile, which tab is used to enable machine learning based engines?

What are three ways application characteristics are used? (Choose three.)

Which two features implement one-to-one translation of a source IP address while allowing the source port to change? (Choose two.)

Which statement applies to Antivirus Dynamic Updates?

What are the two main reasons a custom application is created? (Choose two.)

A network administrator creates an intrazone security policy rule on a NGFW. The source zones are set to IT, Finance, and HR. To which two types of traffic will the rule apply? (Choose two.)

Which two actions are needed for an administrator to get real-time WildFire signatures? (Choose two.)

Which order of steps is the correct way to create a static route?

Which three types of Source NAT are available to users inside a NGFW? (Choose three.)

Which two statements correctly describe how pre-rules and local device rules are viewed and modified?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers