Download Palo Alto Networks Certified Network Security Administrator.PrepAway.PCNSA.2021-05-10.1e.98q.vcex

Download Exam

File Info

Exam Palo Alto Networks Certified Network Security Administrator
Number PCNSA
File Name Palo Alto Networks Certified Network Security Administrator.PrepAway.PCNSA.2021-05-10.1e.98q.vcex
Size 3.3 Mb
Posted May 10, 2021
Downloads 38
Download Palo Alto Networks Certified Network Security Administrator.PrepAway.PCNSA.2021-05-10.1e.98q.vcex

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Purchase

Coupon: MASTEREXAM
With discount: 20%



 
 



Demo Questions

Question 1

Match the Palo Alto Networks Security Operating Platform architecture to its description.  
 

Correct Answer: Exam simulator is required




Question 2

Which plane on a Palo Alto Networks Firewall provides configuration, logging, and reporting functions on a separate processor?

  • A: management
  • B: network processing 
  • C: data
  • D: security processing

Correct Answer: C




Question 3

A security administrator has configured App-ID updates to be automatically downloaded and installed. 
The company is currently using an application identified by App-ID as SuperApp_base.  
On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.  
Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

  • A: All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application
  • B: No impact because the apps were automatically downloaded and installed
  • C: No impact because the firewall automatically adds the rules to the App-ID interface
  • D: All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until the security administrator approves the applications

Correct Answer: C




Question 4

How many zones can an interface be assigned with a Palo Alto Networks firewall?

  • A: two
  • B: three
  • C: four
  • D: one

Correct Answer: D

Reference: 
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/network/network-zones/security-zone-overview




Question 5

Which two configuration settings shown are not the default? (Choose two.) 

     

  • A: Enable Security Log
  • B: Server Log Monitor Frequency (sec)
  • C: Enable Session
  • D: Enable Probing

Correct Answer: BC

Reference: 
https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-web-interface-help/user-identification/device-user-identification-user-mapping/enable-server-monitoring




Question 6

Which dataplane layer of the graphic shown provides pattern protection for spyware and vulnerability exploits on a Palo Alto Networks Firewall? 

     

  • A: Signature Matching
  • B: Network Processing
  • C: Security Processing
  • D: Data Interfaces

Correct Answer: A




Question 7

Which option shows the attributes that are selectable when setting up application filters?

  • A: Category, Subcategory, Technology, and Characteristic
  • B: Category, Subcategory, Technology, Risk, and Characteristic
  • C: Name, Category, Technology, Risk, and Characteristic
  • D: Category, Subcategory, Risk, Standard Ports, and Technology

Correct Answer: B

Reference: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-web-interface-help/objects/objects-application-filters




Question 8

Actions can be set for which two items in a URL filtering security profile? (Choose two.) 

  • A: Block List
  • B: Custom URL Categories
  • C: PAN-DB URL Categories
  • D: Allow List

Correct Answer: AD




Question 9

Match the Cyber-Attack Lifecycle stage to its correct description.  
 

Correct Answer: Exam simulator is required




Question 10

Which two statements are correct about App-ID content updates? (Choose two.)

  • A: Updated application content may change how security policy rules are enforced
  • B: After an application content update, new applications must be manually classified prior to use
  • C: Existing security policy rules are not affected by application content updates
  • D: After an application content update, new applications are automatically identified and classified

Correct Answer: CD










CONNECT US

Facebook

Twitter

PROFEXAM WITH A 20% DISCOUNT

You can buy ProfExam with a 20% discount!



HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files