PCNSA Exam Questions and Answers, Exams of Advanced Education

Download PCNSA Exam Questions and Answers and more Exams Advanced Education in PDF only on Docsity!

PCNSA QUESTIONS 1 COMPLETE UPDATE

QUESTIONS AND ANSWERS

A Security Policy rule displayed in italic font indicates which condition? - The rule is disabled A server profile enables a firewall to locate which server type? - A server with remote user accounts An Interface management profile can be attached to which two interface types - Loopback and Layer 3 Application block pages can be enabled for which applications - web-based because a firewall examines every packet in a session, a firewall can detect application_____________? - shifts Finding URLs matched to the not-resolved url category in the url filtering log might indicate that you should take which action - Validate connectivity to the PAN-DB cloud If a dns sinkhole is configured, any sinkhole actions indicating a potentially infected host are recorded in which log type? - threat in a security profile, which action does a firewall take when the profiles action is configured as a reset server - The traffic responder is reset for udp sessions, the connection is dropped in a HA configuration which 3 components are synchronized between the pair of firewalls - objects policies networks in an HA configuration, which three functions are associated with the HA1 control link? - Exchanging HELLOS exchanging Heartbeats synchronizing configurations in an HA configuration, which 2 failure detection methods rely on ICMP pings? - heartbeats path monitoring

on a firwall that has 32 ethernet ports and it configured with a dynamic IP and Port (DIPP) NAT oversubscription rate of 2x, what is the maximum number of concurrent sessions supported by each available IP? - 128K which two user mapping methods are supported by the User-ID integrated agent? - WMI probing client probing SSL inbound inspection requires that the firewall be configured with which 2 components? - server's private key server's digital certificate the firewall acts as a proxy for which 2 types of traffic? - ssl outbound ssl inbound inspection the threat log records events from wich 3 security profiles - vulnerability protection antivirus url filtering what are 2 benefits of attaching a decryption profile to a decryption policy no-decrypt rule? - expired certificate checking untrusted certificate checking what is a use care for deploying PANetworks NGFW in the public cloud? - extending the corporate data center into the public cloud when SSL traffic passes through the firewall, which component is evaluated first? - decryption policy where does a GlobalProtect client connect to first when trying to connect to a network? - GlobalProtect portal which action in a file blocking security profile results in the user being prompted to verify a file transfer? - Continue which condition must exist before a firewall's in-band interface can process traffic? - the firewall must be assigned to a security zone which feature is a dynamic grouping of application used in security policy rules? - application filter which four actions can be applied to traffic matching a URL filtering security profile? - Block Override Alert

Continue which interface type does NOT require any configuration changes to adjacent network devices?

• Virtual Wire which interface type is NOT assigned to a security zone? - HA which statement describes a function provided by an interface management profile? - it determines which firewall services are accessible from external devices which statement describes the export named configuration snapshot operation? - a saved configuration is transferred to an external host storage device which statement is true about a url filtering profile override password? - there is a single, per- firewall password which three are valid configuration options in a WildFire analysis profile? - file types application direction which 3 components can be sent to WildFire for analysis? - url links found in email email attachments files traversing the firewall which 3 interface types can control or shape network traffic? - layer 2 layer 3 Virtual Wire which 3 network modes are supported by active/passive HA? - layer 2 layer 3 TAP which 3 statements are true regarding sessions on the firewall? - network packets are always matched to a session return traffic is allowed sessions are always matched to a security policy rule which 2 file types can be sent to WildFire for analysis if a firewall has only a standard subscription service? - .exe .dll which 2 user-id methods are used to verify known IP address-to-user mappings? - server monitoring session monitoring

which user mapping method is recommended for a highly mobile user base? - globalprotect which user-id user mapping method is recommended for environments where users frequently change ip addresses? - captive portal which file must be downloaded from the firewall to create a heatmap and best practices assessment report? - tech support file which 3 subscription services are included as part of the GlobalProtect cloud service? - threat prevention WildFire URL Filtering What is the maximum umber of WildFire appliances that can be grouped into a WildFire appliance cluster - 20 the decryption broker feature is supported by which 3 paloalto networks firewall series? - pa- 3200 pa- 5200 pa- 7000 which vm-series model was introduced with the release of PAN-OS 8.1? - VM-50 Lite which cloud computing platform provides shared resources, servers, and storage in a pay as you go model? - public which essential cloud characteristic is designed for applications that will be required to run on all platforms including smartphones, tablets, and laptops? - broad network access