What Simulation PCNSA Practice Question Is

NEW QUESTION 1

Given the image, which two options are true about the Security policy rules. (Choose two.)

• A. The Allow Office Programs rule is using an Application Filter
• B. In the Allow FTP to web server rule, FTP is allowed using App-ID
• C. The Allow Office Programs rule is using an Application Group
• D. In the Allow Social Networking rule, allows all of Facebook’s functions

Answer: BC

NEW QUESTION 2
Which data-plane processor layer of the graphic shown provides uniform matching for spyware and vulnerability exploits on a Palo Alto Networks Firewall?

• A. Signature Matching
• B. Network Processing
• C. Security Processing
• D. Security Matching

Answer: A

NEW QUESTION 3
Which statement is true regarding a Best Practice Assessment?

• A. The BPA tool can be run only on firewalls
• B. It provides a percentage of adoption for each assessment data
• C. The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus prevention activities
• D. It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

Answer: B

NEW QUESTION 4
Your company requires positive username attribution of every IP address used by wireless devices to support a new compliance requirement. You must collect IP –to-user mappings as soon as possible with minimal downtime and minimal configuration changes to the wireless devices themselves. The wireless devices are from various manufactures.
Given the scenario, choose the option for sending IP-to-user mappings to the NGFW.

• A. syslog
• B. RADIUS
• C. UID redistribution
• D. XFF headers

Answer: A

NEW QUESTION 5
Which user mapping method could be used to discover user IDs in an environment with multiple Windows domain controllers?

• A. Active Directory monitoring
• B. Windows session monitoring
• C. Windows client probing
• D. domain controller monitoring

Answer: A

NEW QUESTION 6
What are three differences between security policies and security profiles? (Choose three.)

• A. Security policies are attached to security profiles
• B. Security profiles are attached to security policies
• C. Security profiles should only be used on allowed traffic
• D. Security profiles are used to block traffic by themselves
• E. Security policies can block or allow traffic

Answer: BCE

NEW QUESTION 7
In the example security policy shown, which two websites would be blocked? (Choose two.)

• A. LinkedIn
• B. Facebook
• C. YouTube
• D. Amazon

Answer: AB

NEW QUESTION 8
Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.

• A. Exploitation
• B. Installation
• C. Reconnaissance
• D. Act on Objective

Answer: A

NEW QUESTION 9
An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated? (Choose two.)

• A. vulnerability protection profile applied to outbound security policies
• B. anti-spyware profile applied to outbound security policies
• C. antivirus profile applied to outbound security policies
• D. URL filtering profile applied to outbound security policies

Answer: BD

NEW QUESTION 10
Which interface type is used to monitor traffic and cannot be used to perform traffic shaping?

• A. Layer 2
• B. Tap
• C. Layer 3
• D. Virtual Wire

Answer: B

NEW QUESTION 11
Which two App-ID applications will need to be allowed to use Facebook- chat? (Choose two.)

• A. facebook
• B. facebook-chat
• C. facebook-base
• D. facebook-email

Answer: BC

NEW QUESTION 12
Users from the internal zone need to be allowed to Telnet into a server in the DMZ zone. Complete the security policy to ensure only Telnet is allowed.
Security Policy: Source Zone: Internal to DMZ Zone services “Application defaults”, and action = Allow

• A. Destination IP: 192.168.1.123/24
• B. Application = ‘Telnet’
• C. Log Forwarding
• D. USER-ID = ‘Allow users in Trusted’

Answer: B

NEW QUESTION 13
An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

• A. Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory
• B. Create an Application Group and add business-systems to it
• C. Create an Application Filter and name it Office Programs, then filter it on the business-systems category
• D. Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office

Answer: B

NEW QUESTION 14
DRAG DROP
Match the Cyber-Attack Lifecycle stage to its correct description.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 15
Which interface does not require a MAC or IP address?

• A. Virtual Wire
• B. Layer3
• C. Layer2
• D. Loopback

Answer: A

NEW QUESTION 16
Identify the correct order to configure the PAN-OS integrated USER-ID agent.
3. add the service account to monitor the server(s)
2. define the address of the servers to be monitored on the firewall
4. commit the configuration, and verify agent connection status
1. create a service account on the Domain Controller with sufficient permissions to execute the User- ID agent

• A. 2-3-4-1
• B. 1-4-3-2
• C. 3-1-2-4
• D. 1-3-2-4

Answer: D

NEW QUESTION 17
Actions can be set for which two items in a URL filtering security profile? (Choose two.)

• A. Block List
• B. Custom URL Categories
• C. PAN-DB URL Categories
• D. Allow List

Answer: AD

NEW QUESTION 18
......