Download Palo Alto Networks Certified Network Security Administrator.PCNSA.TestKing.2019-05-27.28q.vcex

Vendor:	Palo Alto Networks
Exam Code:	PCNSA
Exam Name:	Palo Alto Networks Certified Network Security Administrator
Date:	May 27, 2019
File Size:	1 MB

Download Exam

How to open VCEX files?

Files with VCEX extension can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAMFILESCOM

Discount: 20%

Demo Questions

Which firewall plane provides configuration, logging, and reporting functions on a separate processor?

control
network processing
data
security processing

Correct answer: A

How many zones can an interface be assigned with a Palo Alto Networks firewall?

two
three
four
one

Correct answer: D

Explanation:

Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/network/network-zones/security-zone-overview

Which two configuration settings shown are not the default? (Choose two.)

Enable Security Log
Server Log Monitor Frequency (sec)
Enable Session
Enable Probing

Correct answer: BC

Explanation:

Reference: https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-web-interface-help/user-identification/device-user-identification-user-mapping/enable-server-monitoring

Which data-plane processor layer of the graphic shown provides uniform matching for spyware and vulnerability exploits on a Palo Alto Networks Firewall?

Signature Matching
Network Processing
Security Processing
Security Matching

Correct answer: A

Actions can be set for which two items in a URL filtering security profile? (Choose two.)

Block List
Custom URL Categories
PAN-DB URL Categories
Allow List

Correct answer: AD

An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory
Create an Application Group and add business-systems to it
Create an Application Filter and name it Office Programs, then filter it on the business-systems category
Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office

Correct answer: B

Which statement is true regarding a Best Practice Assessment?

The BPA tool can be run only on firewalls
It provides a percentage of adoption for each assessment data
The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus prevention activities
It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

Correct answer: B

Explanation:

Reference: https://docs.paloaltonetworks.com/best-practices/8-1/data-center-best-practices/data-center-best-practice-security-policy/use-palo-alto-networks-assessment-and-review-tools

Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

intrazone-default
Deny Google
allowed-security services
interzone-default

Correct answer: D

When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?