Verified PCNSA dumps Q&As - 100% Pass from DumpTorrent [Q95-Q114]

4.7/5 - (4 votes)

Verified PCNSA dumps Q&As – 100% Pass from DumpTorrent

Pass PCNSA Exam in First Attempt Guaranteed 2023 Dumps!

NO.95 Which type of profile must be applied to the Security policy rule to protect against buffer overflows illegal code execution and other attempts to exploit system flaws”

anti-spyware

URL filtering

vulnerability protection

file blocking

NO.96 Match the Palo Alto Networks Security Operating Platform architecture to its description.

NO.97 An address object of type IP Wildcard Mask can be referenced in which part of the configuration?

Security policy rule

ACC global filter

external dynamic list

NAT address pool

NO.98 What is the main function of Policy Optimizer?

reduce load on the management plane by highlighting combinable security rules

migrate other firewall vendors’ security rules to Palo Alto Networks configuration

eliminate “Log at Session Start” security rules

convert port-based security rules to application-based security rules

NO.99 What are three differences between security policies and security profiles? (Choose three.)

Security policies are attached to security profiles

Security profiles are attached to security policies

Security profiles should only be used on allowed traffic

Security profiles are used to block traffic by themselves

Security policies can block or allow traffic

NO.100 Which Palo Alto Networks firewall security platform provides network security for mobile endpoints by inspecting traffic deployed as internet gateways?

GlobalProtect

AutoFocus

Aperture

Panorama

NO.101 The CFO found a USB drive in the parking lot and decide to plug it into their corporate laptop. The USB drive had malware on it that loaded onto their computer and then contacted a known command and control (CnC) server, which ordered the infected machine to begin Exfiltrating data from the laptop.
Which security profile feature could have been used to prevent the communication with the CnC server?

Create an anti-spyware profile and enable DNS Sinkhole

Create an antivirus profile and enable DNS Sinkhole

Create a URL filtering profile and block the DNS Sinkhole category

Create a security policy and enable DNS Sinkhole

NO.102 Which statements is true regarding a Heatmap report?

When guided by authorized sales engineer, it helps determine te areas of greatest security risk.

It provides a percentage of adoption for each assessment area.

It runs only on firewall.

It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture.

NO.103 You receive notification about new malware that infects hosts through malicious files transferred by FTP.
Which Security profile detects and protects your internal networks from this threat after you update your firewall’s threat signature database?

URL Filtering profile applied to inbound Security policy rules.

Data Filtering profile applied to outbound Security policy rules.

Antivirus profile applied to inbound Security policy rules.

Vulnerability Protection profile applied to outbound Security policy rules.

NO.104 You receive notification about a new malware that infects hosts An infection results in the infected host attempting to contact a command-and-control server Which Security Profile when applied to outbound Security policy rules detects and prevents this threat from establishing a command-and-control connection?

Antivirus Profile

Data Filtering Profile

Vulnerability Protection Profile

Anti-Spyware Profile

NO.105 Starting with PAN-OS version 9.1, application dependency information is now reported in which two locations? (Choose two.)

on the App Dependency tab in the Commit Status window

on the Policy Optimizer’s Rule Usage page

on the Application tab in the Security Policy Rule creation window

on the Objects > Applications browser pages

NO.106 Which type of security rule will match traffic between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?

global

intrazone

interzone

universal

NO.107 Which Security Profile can provide protection against ICMP floods, based on individual combinations of a packet’s source and destination IP addresses?

DoS protection

URL filtering

packet buffering

anti-spyware

NO.108 Match the network device with the correct User-ID technology.

NO.109 Which three configuration settings are required on a Palo Alto networks firewall management interface?

default gateway

netmask

IP address

hostname

auto-negotiation

NO.110 Which option lists the attributes that are selectable when setting up an Application filters?

Category, Subcategory, Technology, and Characteristic

Category, Subcategory, Technology, Risk, and Characteristic

Name, Category, Technology, Risk, and Characteristic

Category, Subcategory, Risk, Standard Ports, and Technology

NO.111 Which feature would be useful for preventing traffic from hosting providers that place few restrictions on content, whose services are frequently used by attackers to distribute illegal or unethical material?

Palo Alto Networks Bulletproof IP Addresses

Palo Alto Networks C&C IP Addresses

Palo Alto Networks Known Malicious IP Addresses

Palo Alto Networks High-Risk IP Addresses

NO.112 Which statement is true regarding a Prevention Posture Assessment?

The Security Policy Adoption Heatmap component filters the information by device groups, serial numbers, zones, areas of architecture, and other categories

It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

It provides a percentage of adoption for each assessment area

It performs over 200 security checks on Panorama/firewall for the assessment

NO.113 A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future Public Cloud environments. All other required connections have already been enabled between the USERS- and the OUTSIDE-zone. What configuration-changes should the Firewall-admin make?

Create a custom-service-object called SERVICE-SSH for destination-port-TCP-22. Create a security-rule between zone USERS and OUTSIDE to allow traffic from any source IP-address to any destination IP- address for SERVICE-SSH

Create a security-rule that allows traffic from zone USERS to OUTSIDE to allow traffic from any source IP- address to any destination IP-address for application SSH

In addition to option a, a custom-service-object called SERVICE-SSH-RETURN that contains source-port- TCP-22 should be created. A second security-rule is required that allows traffic from zone OUTSIDE to USERS for SERVICE-SSH-RETURN for any source-IP-address to any destination-Ip-address

In addition to option c, an additional rule from zone OUTSIDE to USERS for application SSH from any source-IP-address to any destination-IP-address is required to allow the return-traffic from the SSH-servers to reach the server-admin

NO.114 Arrange the correct order that the URL classifications are processed within the system.

PCNSA Exam Overview

The official PCNSA exam is an 80-minute test consisting of 50 questions. The question types to be expected in the main test include multiple-choice, matching, and scenarios with graphics. The certification exam is delivered through Pearson VUE and is available in English only.

To take the PCNSA exam, the candidates are required to pay a fee of $140. It is to be noted that retakes are also paid and the overall cost of this exam may vary depending on the country and its value-added tax.

PCNSA Dumps Full Questions – Exam Study Guide: https://www.dumptorrent.com/PCNSA-braindumps-torrent.html