File Info
| Exam | Palo Alto Networks Certified Network Security Administrator |
| Number | PCNSA |
| File Name | Palo Alto Networks Certified Network Security Administrator.prepaway.PCNSA.2020-12-20.1e.98q.vcex |
| Size | 3.27 Mb |
| Posted | December 20, 2020 |
| Downloads | 45 |
| Download | Palo Alto Networks Certified Network Security Administrator.prepaway.PCNSA.2020-12-20.1e.98q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Match the Palo Alto Networks Security Operating Platform architecture to its description.
Correct Answer: Exam simulator is required
Which plane on a Palo Alto Networks Firewall provides configuration, logging, and reporting functions on a separate processor?
- A: management
- B: network processing
- C: data
- D: security processing
Correct Answer: A
A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base.
On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.
Based on the information, how is the SuperApp traffic affected after the 30 days have passed?
- A: All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application
- B: No impact because the apps were automatically downloaded and installed
- C: No impact because the firewall automatically adds the rules to the App-ID interface
- D: All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until the security administrator approves the applications
Correct Answer: C
How many zones can an interface be assigned with a Palo Alto Networks firewall?
- A: two
- B: three
- C: four
- D: one
Correct Answer: D
Which two configuration settings shown are not the default? (Choose two.)
- A: Enable Security Log
- B: Server Log Monitor Frequency (sec)
- C: Enable Session
- D: Enable Probing
Correct Answer: BC
Which dataplane layer of the graphic shown provides pattern protection for spyware and vulnerability exploits on a Palo Alto Networks Firewall?
- A: Signature Matching
- B: Network Processing
- C: Security Processing
- D: Data Interfaces
Correct Answer: A
Which option shows the attributes that are selectable when setting up application filters?
- A: Category, Subcategory, Technology, and Characteristic
- B: Category, Subcategory, Technology, Risk, and Characteristic
- C: Name, Category, Technology, Risk, and Characteristic
- D: Category, Subcategory, Risk, Standard Ports, and Technology
Correct Answer: B
Actions can be set for which two items in a URL filtering security profile? (Choose two.)
- A: Block List
- B: Custom URL Categories
- C: PAN-DB URL Categories
- D: Allow List
Correct Answer: AD
Match the Cyber-Attack Lifecycle stage to its correct description.
Correct Answer: Exam simulator is required
Which two statements are correct about App-ID content updates? (Choose two.)
- A: Updated application content may change how security policy rules are enforced
- B: After an application content update, new applications must be manually classified prior to use
- C: Existing security policy rules are not affected by application content updates
- D: After an application content update, new applications are automatically identified and classified
Correct Answer: CD
