Download Palo Alto Networks Certified Network Security Administrator.PCNSA.CertKiller.2019-04-09.15q.vcex

Vendor: Palo Alto Networks
Exam Code: PCNSA
Exam Name: Palo Alto Networks Certified Network Security Administrator
Date: Apr 09, 2019
File Size: 869 KB
Download Exam

How to open VCEX files?

Files with VCEX extension can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAMFILESCOM

Discount: 20%

ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator

Demo Questions

Question 1
How many zones can an interface be assigned with a Palo Alto Networks firewall?
  1. two
  2. three
  3. four
  4. one
Correct answer: D
Explanation:
Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/network/network-zones/security-zone-overview
Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/network/network-zones/security-zone-overview
Question 2
Which two configuration settings shown are not the default? (Choose two.) 
  
  1. Enable Security Log
  2. Server Log Monitor Frequency (sec)
  3. Enable Session
  4. Enable Probing
Correct answer: BC
Explanation:
Reference: https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-web-interface-help/user-identification/device-user-identification-user-mapping/enable-server-monitoring
Reference: https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-web-interface-help/user-identification/device-user-identification-user-mapping/enable-server-monitoring
Question 3
Which data-plane processor layer of the graphic shown provides uniform matching for spyware and vulnerability exploits on a Palo Alto Networks Firewall?  
  
  1. Signature Matching
  2. Network Processing
  3. Security Processing
  4. Security Matching
Correct answer: A
Question 4
An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?
  1. Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory
  2. Create an Application Group and add business-systems to it
  3. Create an Application Filter and name it Office Programs, then filter it on the business-systems category
  4. Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office
Correct answer: B
Question 5
When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None? 
  
  1. Translation Type
  2. Interface
  3. Address Type
  4. IP Address
Correct answer: A
Question 6
Which interface does not require a MAC or IP address?
  1. Virtual Wire
  2. Layer3
  3. Layer2
  4. Loopback
Correct answer: A
Question 7
Which two App-ID applications will need to be allowed to use Facebook-chat? (Choose two.)
  1. facebook
  2. facebook-chat
  3. facebook-base
  4. facebook-email
Correct answer: BC
Explanation:
Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClV0CAK
Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClV0CAK
Question 8
An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated? (Choose two.)
  1. vulnerability protection profile applied to outbound security policies
  2. anti-spyware profile applied to outbound security policies
  3. antivirus profile applied to outbound security policies
  4. URL filtering profile applied to outbound security policies
Correct answer: BD
Explanation:
Reference: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/policy/create-best-practice-security-profiles
Reference: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/policy/create-best-practice-security-profiles
Question 9
Identify the correct order to configure the PAN-OS integrated USER-ID agent.  
3. add the service account to monitor the server(s) 
2. define the address of the servers to be monitored on the firewall  
4. commit the configuration, and verify agent connection status  
1. create a service account on the Domain Controller with sufficient permissions to execute the User- ID agent
  1. 2-3-4-1
  2. 1-4-3-2
  3. 3-1-2-4
  4. 1-3-2-4
Correct answer: D
Question 10
An administrator notices that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would the administrator need to monitor and block to mitigate the malicious activity?  
  
  1. branch office traffic
  2. north-south traffic
  3. perimeter traffic
  4. east-west traffic
Correct answer: D
CONNECT US
HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset

HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen

ProfExam
ProfExam at a 20% markdown

You have the opportunity to purchase ProfExam at a 20% reduced price

Get Now!