Paloalto-Networks PCNSA Free Practice Questions

NEW QUESTION 1
Which two Palo Alto Networks security management tools provide a consolidated creation of policies, centralized management and centralized threat intelligence. (Choose two.)

• A. GlobalProtect
• B. Panorama
• C. Aperture
• D. AutoFocus

Answer: BD

NEW QUESTION 2
Which two App-ID applications will need to be allowed to use Facebook- chat? (Choose two.)

• A. facebook
• B. facebook-chat
• C. facebook-base
• D. facebook-email

Answer: BC

NEW QUESTION 3
Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.

• A. Exploitation
• B. Installation
• C. Reconnaissance
• D. Act on Objective

Answer: A

NEW QUESTION 4
Recently changes were made to the firewall to optimize the policies and the security team wants to see if those changes are helping. What is the quickest way to reset the hit counter to zero in all the security policy rules?

• A. At the CLI enter the command reset rules and press Enter
• B. Highlight a rule and use the Reset Rule Hit Counter > Selected Rules for each rule
• C. Reboot the firewall
• D. Use the Reset Rule Hit Counter > All Rules option

Answer: D

NEW QUESTION 5
Which administrator type utilizes predefined roles for a local administrator account?

• A. Superuser
• B. Role-based
• C. Dynamic
• D. Device administrator

Answer: C

NEW QUESTION 6
Actions can be set for which two items in a URL filtering security profile? (Choose two.)

• A. Block List
• B. Custom URL Categories
• C. PAN-DB URL Categories
• D. Allow List

Answer: AD

NEW QUESTION 7
Your company requires positive username attribution of every IP address used by wireless devices to support a new compliance requirement. You must collect IP –to-user mappings as soon as possible with minimal downtime and minimal configuration changes to the wireless devices themselves. The wireless devices are from various manufactures.
Given the scenario, choose the option for sending IP-to-user mappings to the NGFW.

• A. syslog
• B. RADIUS
• C. UID redistribution
• D. XFF headers

Answer: A

NEW QUESTION 8
Which user mapping method could be used to discover user IDs in an environment with multiple Windows domain controllers?

• A. Active Directory monitoring
• B. Windows session monitoring
• C. Windows client probing
• D. domain controller monitoring

Answer: A

NEW QUESTION 9
Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

• A. intrazone-default
• B. Deny Google
• C. allowed-security services
• D. interzone-default

Answer: D

NEW QUESTION 10
Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?

• A. Root
• B. Dynamic
• C. Role-based
• D. Superuser

Answer: C

NEW QUESTION 11
Which data-plane processor layer of the graphic shown provides uniform matching for spyware and vulnerability exploits on a Palo Alto Networks Firewall?

• A. Signature Matching
• B. Network Processing
• C. Security Processing
• D. Security Matching

Answer: A

NEW QUESTION 12
Which interface does not require a MAC or IP address?

• A. Virtual Wire
• B. Layer3
• C. Layer2
• D. Loopback

Answer: A

NEW QUESTION 13
......