Best Quality PCNSA Exam Questions Palo Alto Networks Test To Gain Brilliante Result!
Preparations of PCNSA Exam 2021 Paloalto Network Security Administrator Unlimited 170 Questions
Details for PCNSA Exam
The primary objective of the PCNSA test is to showcase that a candidate has a deep understanding of the Palo Alto Networks Platform and can protect networks from cyber threats by deploying his/her knowledge and skills. Success in this exam earns you the PCNSA certification. The PCNSA is available in English only and consists of 50 multiple-choice, matching, and scenarios with graphics questions. As per the vendor, the exam takes a total of 90 minutes. Ten of those minutes are dedicated to review the PCNSA policy and take a survey. And if you happen to fail an exam, you will get a report detailing the areas you should focus on before retaking the test. Also, it costs $155 to take the official exam in the US, but this registration fee varies across regions and is VAT dependent.
Prerequisites
There are no formal requirements set for this certification. However, it is recommended that the candidates complete the relevant training, including the Firewall Essentials: Configuration and Management (EDU-210) course before attempting the prerequisite test. In addition, they must have at least two years of working experience in the security or networking spheres and six months of experience operating with the Palo Alto Networks product portfolio. They also need to have a minimum of six months of experience in deploying and configuring Palo Alto Networks NGFW.
NEW QUESTION 33
What must be configured for the firewall to access multiple authentication profiles for external services to authenticate a non-local account?
- A. authentication list profile
- B. LDAP server profile
- C. authentication sequence
- D. authentication server list
Answer: C
NEW QUESTION 34
Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?
- A. Deny Google
- B. interzone-default
- C. intrazone-default
- D. allowed-security services
Answer: B
NEW QUESTION 35
Which two App-ID applications will need to be allowed to use Facebook-chat? (Choose two.)
- A. facebook-chat
- B. facebook-base
- C. facebook
- D. facebook-email
Answer: A,B
Explanation:
Explanation/Reference:
Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClV0CAK
NEW QUESTION 36
The CFO found a malware infected USB drive in the parking lot, which when inserted infected their corporate laptop. The malware contacted a known command-and-control server, which caused the infected laptop to begin exfiltrating corporate data.
Which security profile feature could have been used to prevent the communication with the command-and- control server?
- A. Create a Data Filtering Profiles and enable its DNS Sinkhole feature.
- B. Create an anti-spyware profile and enable DNS Sinkhole feature.
- C. Create an antivirus profile and enable its DNS Sinkhole feature.
- D. Create a URL filtering profile and block the DNS Sinkhole URL category
Answer: A
NEW QUESTION 37
Which interface does not require a MAC or IP address?
- A. Loopback
- B. Layer2
- C. Layer3
- D. Virtual Wire
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 38
Order the steps needed to create a new security zone with a Palo Alto Networks firewall.
Answer:
Explanation:
Explanation
Step 1 - Select network tab
Step 2 - Select zones from the list of available items
Step 3 - Select Add
Step 4 - Specify Zone Name
Step 5 - Specify Zone Type
Step 6 - Assign interfaces as needed
NEW QUESTION 39
The PowerBall Lottery has reached an unusually high value this week. Your company has decided to raise morale by allowing employees to access the PowerBall Lottery website (www.powerball.com) for just this week. However, the company does not want employees to access any other websites also listed in the URL filtering "gambling" category.
Which method allows the employees to access the PowerBall Lottery website but without unblocking access to the "gambling" URL category?
- A. Add just the URL www.powerball.com to a Security policy allow rule.
- B. Manually remove powerball.com from the gambling URL category.
- C. Add *.powerball.com to the URL Filtering allow list.
- D. Create a custom URL category, add *.powerball.com to it and allow it in the Security Profile.
Answer: C,D
NEW QUESTION 40
Which URL profiling action does not generate a log entry when a user attempts to access that URL?
- A. Allow
- B. Continue
- C. Override
- D. Block
Answer: A
Explanation:
References:
NEW QUESTION 41
Based on the security policy rules shown, ssh will be allowed on which port?
- A. any port
- B. only ephemeral ports
- C. the default port
- D. same port as ssl and snmpv3
Answer: C
NEW QUESTION 42
Which two App-ID applications will need to be allowed to use facebook-chat? (Choose two.)
- A. facebook-chat
- B. facebook-base
- C. facebook
- D. facebook-email
Answer: A,B
Explanation:
Explanation/Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClV0CAK
NEW QUESTION 43
Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?
- A. Role-based
- B. Superuser
- C. Dynamic
- D. Root
Answer: A
NEW QUESTION 44
What do dynamic user groups you to do?
- A. create a policy that provides auto-remediation for anomalous user behavior and malicious activity
- B. create a dynamic list of firewall administrators
- C. create a QoS policy that provides auto-remediation for anomalous user behavior and malicious activity
- D. create a policy that provides auto-sizing for anomalous user behavior and malicious activity
Answer: B
NEW QUESTION 45
Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)
- A. QoS-ID
- B. Layer-ID
- C. App-ID
- D. User-ID
Answer: C,D
NEW QUESTION 46
Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can run malicious code against a targeted machine.
- A. Reconnaissance
- B. Act on Objective
- C. Installation
- D. Exploitation
Answer: D
NEW QUESTION 47
Which firewall plane provides configuration, logging, and reporting functions on a separate processor?
- A. data
- B. security processing
- C. control
- D. network processing
Answer: C
NEW QUESTION 48
Which three types of authentication services can be used to authenticate user traffic flowing through the firewalls data plane? (Choose three )
- A. TACACS
- B. Kerberos
- C. SAML10
- D. SAML2
- E. TACACS+
Answer: A,B,D
NEW QUESTION 49
Your company occupies one floor in a single building. You have two Active Directory domain controllers on a single network. The firewall's management plane is only slightly utilized.
Which User-ID agent is sufficient in your network?
- A. PAN-OS integrated agent deployed on the firewall
- B. Windows-based agent deployed on the internal network a domain member
- C. Windows-based agent deployed on each domain controller
- D. Citrix terminal server agent deployed on the network
Answer: C
Explanation:
Explanation/Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/user-id/map-ip-addresses-to-users/ configure-user-mapping-using-the-windows-user-id-agent/configure-the-windows-based-user-id-agent-for-user- mapping.html
NEW QUESTION 50
How is the hit count reset on a rule?
- A. with a dataplane reboot
- B. Device > Setup > Logging and Reporting Settings > Reset Hit Count
- C. select a security policy rule, right click Hit Count > Reset
- D. in the CLI, type command reset hitcount <POLICY-NAME>
Answer: C
NEW QUESTION 51
At which point in the app-ID update process can you determine if an existing policy rule is affected by an app-ID update?
- A. after downloading the update
- B. after connecting the firewall configuration
- C. after installing the update
- D. after clicking Check New in the Dynamic Update window
Answer: B
NEW QUESTION 52
Which path in PAN-OS 10.0 displays the list of port-based security policy rules?
- A. Policies> Security> Rule Usage> Unused Apps
- B. Policies> Security> Rule Usage> Port-based Rules
- C. Policies> Security> Rule Usage> Port only specified
- D. Policies> Security> Rule Usage> No App Specified
Answer: D
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/security-policy-rule-optimization/migrate-port-based-to-app-id-based-security-policy-rules.html
NEW QUESTION 53
......
Focus on PCNSA All-in-One Exam Guide For Quick Preparation: https://www.itexamreview.com/PCNSA-exam-dumps.html
PCNSA All-in-One Exam Guide For Quick Preparation: https://drive.google.com/open?id=1Trj61_kawtjNcaQaf96-Yh8fmU8mhAyw
