Free Download PCNSA Examp Dump: Palo Alto Networks.PCNSA.BrainDumps.2019-04-13.26q.vcex

File Info

Exam	Palo Alto Networks Certified Network Security Administrator
Number	PCNSA
File Name	Palo Alto Networks.PCNSA.BrainDumps.2019-04-13.26q.vcex
Size	1 MB
Posted	Apr 13, 2019
Download	Palo Alto Networks.PCNSA.BrainDumps.2019-04-13.26q.vcex

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase

Coupon: MASTEREXAM
With discount: 20%

Demo Questions

Question 1

Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

intrazone-default
Deny Google
allowed-security services
interzone-default

Correct answer: D

Question 2

Complete the statement. A security profile can block or allow traffic.

on unknown-tcp or unknown-udp traffic
after it is evaluated by a security policy that allows traffic
before it is evaluated by a security policy
after it is evaluated by a security policy that allows or blocks traffic

Correct answer: D

Question 3

Your company requires positive username attribution of every IP address used by wireless devices to support a new compliance requirement. You must collect IP – to-user mappings as soon as possible with minimal downtime and minimal configuration changes to the wireless devices themselves. The wireless devices are from various manufactures.

Given the scenario, choose the option for sending IP-to-user mappings to the NGFW.

syslog
RADIUS
UID redistribution
XFF headers

Correct answer: A

Question 4

An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated?

(Choose two.)

vulnerability protection profile applied to outbound security policies
anti-spyware profile applied to outbound security policies
antivirus profile applied to outbound security policies
URL filtering profile applied to outbound security policies

Correct answer: BD

Explanation:

Reference: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/policy/create-best-practice-security-profiles

Question 5

In which stage of the Cyber-Attack Lifecycle would the attacker inject a PDF file within an email?

Weaponization
Reconnaissance
Installation
Command and Control
Exploitation

Correct answer: A

Question 6

Identify the correct order to configure the PAN-OS integrated USER-ID agent.

create a service account on the Domain Controller with sufficient permissions to execute the User- ID agent
define the address of the servers to be monitored on the firewall
add the service account to monitor the server(s)
commit the configuration, and verify agent connection status

2-3-4-1
1-4-3-2
3-1-2-4
1-3-2-4

Correct answer: D

Question 7

Users from the internal zone need to be allowed to Telnet into a server in the DMZ zone.

Complete the security policy to ensure only Telnet is allowed.

Security Policy: Source Zone: Internal to DMZ Zone __________services “Application defaults”, and action = Allow

Destination IP: 192.168.1.123/24
Application = ‘Telnet’
Log Forwarding
USER-ID = ‘Allow users in Trusted’

Correct answer: B

Question 8

Based on the security policy rules shown, ssh will be allowed on which port?

Correct answer: C

Question 9

Which license must an Administrator acquire prior to downloading Antivirus Updates for use with the firewall?

Threat Prevention License
Threat Implementation License
Threat Environment License
Threat Protection License

Correct answer: A

Explanation:

Reference: https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/threat-prevention/set-up-antivirus-anti-spyware-and-vulnerability-protection.html

Question 10

An administrator notices that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would the administrator need to monitor and block to mitigate the malicious activity?