How Many Questions Of PCNSA Test Preparation

NEW QUESTION 1
Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?

• A. Root
• B. Dynamic
• C. Role-based
• D. Superuser

Answer: C

NEW QUESTION 2
In which stage of the Cyber-Attack Lifecycle would the attacker inject a PDF file within an email?

• A. Weaponization
• B. Reconnaissance
• C. Installation
• D. Command and Control
• E. Exploitation

Answer: A

NEW QUESTION 3
Which five Zero Trust concepts does a Palo Alto Networks firewall apply to achieve an integrated approach to prevent threats? (Choose five.)

• A. User identification
• B. Filtration protection
• C. Vulnerability protection
• D. Antivirus
• E. Application identification
• F. Anti-spyware

Answer: ACDEF

NEW QUESTION 4
Which two security profile types can be attached to a security policy? (Choose two.)

• A. antivirus
• B. DDoS protection
• C. threat
• D. vulnerability

Answer: AD

NEW QUESTION 5
A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base. On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days. Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

• A. All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application
• B. No impact because the apps were automatically downloaded and installed
• C. No impact because the firewall automatically adds the rules to the App-ID interface
• D. All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until the security administrator approves the applications

Answer: C

NEW QUESTION 6
Which license must an Administrator acquire prior to downloading Antivirus Updates for use with the firewall?

• A. Threat Prevention License
• B. Threat Implementation License
• C. Threat Environment License
• D. Threat Protection License

Answer: A

NEW QUESTION 7
What are two differences between an implicit dependency and an explicit dependency in App- ID? (Choose two.)

• A. An implicit dependency does not require the dependent application to be added in the security policy
• B. An implicit dependency requires the dependent application to be added in the security policy
• C. An explicit dependency does not require the dependent application to be added in the security policy
• D. An explicit dependency requires the dependent application to be added in the security policy

Answer: AD

NEW QUESTION 8
Which file is used to save the running configuration with a Palo Alto Networks firewall?

• A. running-config.xml
• B. run-config.xml
• C. running-configuration.xml
• D. run-configuratin.xml

Answer: A

NEW QUESTION 9
Which firewall plane provides configuration, logging, and reporting functions on a separate processor?

• A. control
• B. network processing
• C. data
• D. security processing

Answer: A

NEW QUESTION 10
Given the topology, which zone type should zone A and zone B to be configured with?

• A. Layer3
• B. Tap
• C. Layer2
• D. Virtual Wire

Answer: A

NEW QUESTION 11
Which data-plane processor layer of the graphic shown provides uniform matching for spyware and vulnerability exploits on a Palo Alto Networks Firewall?

• A. Signature Matching
• B. Network Processing
• C. Security Processing
• D. Security Matching

Answer: A

NEW QUESTION 12
An administrator notices that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would the administrator need to monitor and block to mitigate the malicious activity?

• A. branch office traffic
• B. north-south traffic
• C. perimeter traffic
• D. east-west traffic

Answer: D

NEW QUESTION 13
DRAG DROP
Match the Cyber-Attack Lifecycle stage to its correct description.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 14
How many zones can an interface be assigned with a Palo Alto Networks firewall?

• A. two
• B. three
• C. four
• D. one

Answer: BC

Explanation:
5. Which two configuration settings shown are not the default? (Choose two.)
A. Enable Security Log
B. Server Log Monitor Frequency (sec)
C. Enable Session
D. Enable Probing

NEW QUESTION 15
An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated? (Choose two.)

• A. vulnerability protection profile applied to outbound security policies
• B. anti-spyware profile applied to outbound security policies
• C. antivirus profile applied to outbound security policies
• D. URL filtering profile applied to outbound security policies

Answer: BD

NEW QUESTION 16
Which interface does not require a MAC or IP address?

• A. Virtual Wire
• B. Layer3
• C. Layer2
• D. Loopback

Answer: A

NEW QUESTION 17
Which interface type is used to monitor traffic and cannot be used to perform traffic shaping?

• A. Layer 2
• B. Tap
• C. Layer 3
• D. Virtual Wire

Answer: B

NEW QUESTION 18
Which option shows the attributes that are selectable when setting up application filters?

• A. Category, Subcategory, Technology, and Characteristic
• B. Category, Subcategory, Technology, Risk, and Characteristic
• C. Name, Category, Technology, Risk, and Characteristic
• D. Category, Subcategory, Risk, Standard Ports, and Technology

Answer: B

NEW QUESTION 19
Which two App-ID applications will need to be allowed to use Facebook- chat? (Choose two.)

• A. facebook
• B. facebook-chat
• C. facebook-base
• D. facebook-email

Answer: BC

NEW QUESTION 20
......