PCNSA EXAM TRYOUT

Within an Anti-Spyware security profile, which tab is used to enable machine learning based engines?

• Signature Exceptions
• Signature Policies
• Machine Learning Policies
• Inline Cloud Analysis

What are three ways application characteristics are used? (Choose three.)

• As an attribute to define an application group
• As a global filter in the Application Command Center (ACC)
• As an attribute to define an application filter
• As a setting to define a new custom application
• As an object to define Security policies

Which two features implement one-to-one translation of a source IP address while allowing the source port to change? (Choose two.)

• Dynamic IP/Port Fallback
• Static IP
• Dynamic IP
• Dynamic IP and Port (DIPP)

Which statement applies to Antivirus Dynamic Updates?

• When the firewall downloads and installs each new antivirus version in order, it shows as a full update.
• They are released every 48 hours.
• They include signatures for newly discovered malware.
• When the firewall does not download and install a new antivirus version in order, it shows as an incremental update.

What are the two main reasons a custom application is created? (Choose two.)

• To visually group similar applications
• To correctly identify an internal application in the traffic log
• To change the default categorization of an application
• To reduce unidentified traffic on a network

A network administrator creates an intrazone security policy rule on a NGFW. The source zones are set to IT, Finance, and HR. To which two types of traffic will the rule apply? (Choose two.)

• Within zone HR
• Between zone IT and zone HR
• Within zone IT
• Between zone IT and zone Finance

Which two actions are needed for an administrator to get real-time WildFire signatures? (Choose two.)

• Move within the WildFire public cloud region.
• Obtain a Threat Prevention subscription.
• Enable Dynamic Updates.
• Obtain a WildFire subscription.

Which order of steps is the correct way to create a static route?

• 1) Enter the route and netmask 2) Specify the outgoing interface for packets to use to go to the next hop 3) Enter the IP address for the specific next hop 4) Add an IPv4 or IPv6 route by name
• 1) Enter the IP address for the specific next hop 2) Enter the route and netmask 3) Add an IPv4 or IPv6 route by name 4) Specify the outgoing interface for packets to use to go to the next hop
• 1) Enter the route and netmask 2) Enter the IP address for the specific next hop 3) Specify the outgoing interface for packets to use to go to the next hop 4) Add an IPv4 or IPv6 route by name
• 1) Enter the IP address for the specific next hop 2) Add an IPv4 or IPv6 route by name 3) Enter the route and netmask 4) Specify the outgoing interface for packets to use to go to the next hop

Which three types of Source NAT are available to users inside a NGFW? (Choose three.)

• Dynamic IP and Port (DIPP)
• Static IP
• Static Port
• Dynamic IP
• Static IP and Port (SIPP)

Which two statements correctly describe how pre-rules and local device rules are viewed and modified?

• Pre-rules can be modified by the local administrator or by a Panorama administrator who has switched to a local firewall.
• Pre-rules are modified in Panorama only, and local device rules are modified on local firewalls only
• Pre-rules and local device rules can be modified in Panorama.
• Pre-rules can be viewed on managed firewalls.