Your success in Paloalto-Networks PCNSA is our sole target and we develop all our PCNSA braindumps in a way that facilitates the attainment of this target. Not only is our PCNSA study material the best you can find, it is also the most detailed and the most updated. PCNSA Practice Exams for Paloalto-Networks PCNSA are written to the highest standards of technical accuracy.
Free PCNSA Demo Online For Paloalto-Networks Certifitcation:
NEW QUESTION 1
How often does WildFire release dynamic updates?
- A. every 5 minutes
- B. every 15 minutes
- C. every 60 minutes
- D. every 30 minutes
Answer: A
NEW QUESTION 2
Which three types of authentication services can be used to authenticate user traffic flowing through the firewalls data plane? (Choose three )
- A. TACACS
- B. SAML2
- C. SAML10
- D. Kerberos
- E. TACACS+
Answer: ABD
NEW QUESTION 3
Within an Anti-Spyware security profile, which tab is used to enable machine learning based engines?
- A. Inline Cloud Analysis
- B. Signature Exceptions
- C. Machine Learning Policies
- D. Signature Policies
Answer: A
Explanation:
✑ An Anti-Spyware security profile is a set of rules that defines how the firewall detects and prevents spyware from compromising hosts on the network. Spyware is a type of malware that collects information from the infected system, such as keystrokes, browsing history, or personal data, and sends it to an external command-and-control (C2) server1.
✑ An Anti-Spyware security profile consists of four tabs: Signature Policies, Signature Exceptions, Machine Learning Policies, and Inline Cloud Analysis1.
✑ The Signature Policies tab allows you to configure the actions and log settings for each spyware signature category, such as adware, botnet, keylogger, phishing, or worm. You can also enable DNS Security to block malicious DNS queries and responses1.
✑ The Signature Exceptions tab allows you to create exceptions for specific spyware signatures that you want to override the default action or log settings. For example, you can allow a signature that is normally blocked by the profile, or block a signature that is normally alerted by the profile1.
✑ The Machine Learning Policies tab allows you to configure the actions and log settings for machine learning based signatures that detect unknown spyware variants. You can also enable WildFire Analysis to submit unknown files to the cloud for further analysis1.
✑ The Inline Cloud Analysis tab allows you to enable machine learning based engines that detect unknown spyware variants in real time. These engines use cloud-based models to analyze the behavior and characteristics of network traffic and identify malicious patterns. You can enable inline cloud analysis for HTTP/HTTPS traffic, SMTP/SMTPS traffic, or IMAP/IMAPS traffic1.
Therefore, the tab that is used to enable machine learning based engines is the InlineCloud Analysis tab. References:
1: Security Profile: Anti-Spyware - Palo Alto Networks
NEW QUESTION 4
Prior to a maintenance-window activity, the administrator would like to make a backup of only the running configuration to an external location. What command in Device > Setup > Operations would provide the most operationally efficient way to achieve this outcome?
Solution:
Export Named Configuration Snapshot This option exports the current running configuration, a candidate configuration snapshot, or a previously imported configuration (candidate or running). The firewall exports the configuration as an XML file with the specified name. You can save the snapshot in any network location. These exports often are used as backups. These XML files also can be used as templates for building other firewall configurations.
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 5
Which prevention technique will prevent attacks based on packet count?
- A. zone protection profile
- B. URL filtering profile
- C. antivirus profile
- D. vulnerability profile
Answer: A
NEW QUESTION 6
Which action results in the firewall blocking network traffic with out notifying the sender?
- A. Drop
- B. Deny
- C. Reset Server
- D. Reset Client
Answer: B
NEW QUESTION 7
Which license must an administrator acquire prior to downloading Antivirus updates for use with the firewall?
- A. URL filtering
- B. Antivirus
- C. WildFire
- D. Threat Prevention
Answer: D
NEW QUESTION 8
An administrator wants to create a No-NAT rule to exempt a flow from the default NAT rule. What is the best way to do this?
- A. Create a Security policy rule to allow the traffic.
- B. Create a new NAT rule with the correct parameters and leave the translation type as None
- C. Create a static NAT rule with an application override.
- D. Create a static NAT rule translating to the destination interface.
Answer: B
NEW QUESTION 9In which stage of the Cyber-Attack Lifecycle would the attacker inject a PDF file within an email?
- A. Weaponization
- B. Reconnaissance
- C. Installation
- D. Command and Control
- E. Exploitation
Answer: A
NEW QUESTION 10
Which User-ID mapping method should be used for an environment with clients that do not authenticate to Windows Active Directory?
- A. Windows session monitoring via a domain controller
- B. passive server monitoring using the Windows-based agent
- C. Captive Portal
- D. passive server monitoring using a PAN-OS integrated User-ID agent
Answer: C
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/user-id/map-ip-addresses-to-users/map-ip-addresses-to-usernames-using-captive-portal.html
NEW QUESTION 11
Which data flow direction is protected in a zero trust firewall deployment that is not protected in a perimeter-only firewall deployment?
- A. outbound
- B. north south
- C. inbound
- D. east west
Answer: D
NEW QUESTION 12
Which type of administrative role must you assign to a firewall administrator account, if the account must include a custom set of firewall permissions?
- A. SAML
- B. Multi-Factor Authentication
- C. Role-based
- D. Dynamic
Answer: C
Explanation:
Reference:https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/firewall-administration/manage-firewall-administrators/administrative-role-types.html
NEW QUESTION 13
DRAG DROP
Place the following steps in the packet processing order of operations from first to last.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 14
Which user mapping method could be used to discover user IDs in an environment with multiple Windows domain controllers?
- A. Active Directory monitoring
- B. Windows session monitoring
- C. Windows client probing
- D. domain controller monitoring
Answer: A
NEW QUESTION 15
Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)
- A. Layer-ID
- B. User-ID
- C. QoS-ID
- D. App-ID
Answer: BD
Explanation:
NEW QUESTION 16
Given the detailed log information above, what was the result of the firewall traffic inspection?
- A. It was blocked by the Anti-Virus Security profile action.
- B. It was blocked by the Anti-Spyware Profile action.
- C. It was blocked by the Vulnerability Protection profile action.
- D. It was blocked by the Security policy action.
Answer: B
NEW QUESTION 17
Based on the graphic which statement accurately describes the output shown in the server monitoring panel?
- A. The User-ID agent is connected to a domain controller labeled lab-client.
- B. The host lab-client has been found by the User-ID agent.
- C. The host lab-client has been found by a domain controller.
- D. The User-ID agent is connected to the firewall labeled lab-client.
Answer: A
NEW QUESTION 18
Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?
- A. Root
- B. Dynamic
- C. Role-based
- D. Superuser
Answer: C
NEW QUESTION 19
Access to which feature requires the PAN-OS Filtering license?
- A. PAN-DB database
- B. DNS Security
- C. Custom URL categories
- D. URL external dynamic lists
Answer: A
Explanation:
Reference:https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/getting-started/activate-licenses-andsubscriptions.html
NEW QUESTION 20The firewall sends employees an application block page when they try to access Youtube. Which Security policy rule is blocking the youtube application?
- A. intrazone-default
- B. Deny Google
- C. allowed-security services
- D. interzone-default
Answer: D
NEW QUESTION 21
......
Thanks for reading the newest PCNSA exam dumps! We recommend you to try the PREMIUM Certleader PCNSA dumps in VCE and PDF here: https://www.certleader.com/PCNSA-dumps.html (287 Q&As Dumps)
