PCNSA Braindumps Real Exam Updated on Jan 14, 2024 with 293 Questions [Q111-Q126]

5/5 - (3 votes)

PCNSA Braindumps Real Exam Updated on Jan 14, 2024 with 293 Questions

Latest PCNSA PDF Dumps & Real Tests Free Updated Today

Palo Alto Networks Certified Network Security Administrator (PCNSA) exam is a certification offered by Palo Alto Networks, a leading cybersecurity company that specializes in network security. The PCNSA certification focuses on ensuring that IT professionals have the necessary skills and knowledge to administer and maintain the security of Palo Alto Networks next-generation firewalls, which are widely used in enterprise environments. Palo Alto Networks Certified Network Security Administrator certification is aimed at network security professionals, including security administrators, network engineers, and support staff who work with Palo Alto Networks firewalls.

Q111. Which two features can be used to tag a username so that it is included in a dynamic user group?
(Choose two.)

GlobalProtect agent

XML API

User-ID Windows-based agent

log forwarding auto-tagging

Usernames also can be tagged and untagged using the autotagging feature in a Log Forwarding Profile. You also can program another utility to invoke PAN-OS XML API commands to tag or untag usernames. In the web interface you can use logical AND or OR operators with the tags to better filter or match against. You can configure a timeout value that determines when a username will be untagged automatically.
https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/education/pcns e-study-guide.pdf

Q112. Given the topology, which zone type should zone A and zone B to be configured with?

Layer3

Tap

Layer2

Virtual Wire

Explanation/Reference:

Q113. Match the Palo Alto Networks Security Operating Platform architecture to its description.

Explanation
Threat Intelligence Cloud – Gathers, analyzes, correlates, and disseminates threats to and from the network and endpoints located within the network.
Next-Generation Firewall – Identifies and inspects all traffic to block known threats Advanced Endpoint Protection – Inspects processes and files to prevent known and unknown exploits

Q114. Based on the security policy rules shown, ssh will be allowed on which port?

any port

same port as ssl and snmpv3

the default port

only ephemeral ports

Q115. When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?

Translation Type

Interface

Address Type

IP Address

Q116. Based on the security policy rules shown, ssh will be allowed on which port?

Q117. When creating an address object, which option is available to select from the Type drop-down menu?

IPv6 Address

IP Netmask

IPv4 Address

IP Address Class

Q118. When creating a Panorama administrator type of Device Group and Template Admin, which two things must you create first? (Choose two.)

password profile

access domain

admin rote

server profile

Q119. Which two App-ID applications will need to be allowed to use facebook-chat? (Choose two.)

facebook

facebook-chat

facebook-base

facebook-email

Explanation/Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClV0CAK

Q120. In which profile should you configure the DNS Security feature?

URL Filtering Profile

Anti-Spyware Profile

Zone Protection Profile

Antivirus Profile

Q121. Match the Cyber-Attack Lifecycle stage to its correct description.

Explanation
Reconnaissance – stage where the attacker scans for network vulnerabilities and services that can be exploited.
Installation – stage where the attacker will explore methods such as a root kit to establish persistence Command and Control – stage where the attacker has access to a specific server so they can communicate and pass data to and from infected devices within a network.
Act on the Objective – stage where an attacker has motivation for attacking a network to deface web property

Q122. A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base.
On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.
Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application

No impact because the apps were automatically downloaded and installed

No impact because the firewall automatically adds the rules to the App-ID interface

All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until the security administrator approves the applications

To allow the new applications, we need to modify or add a new policy.
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/manage-new-app-ids- introduced-in-content-releases/review-new-app-id-impact-on-existing-policy-rules

Q123. Which prevention technique will prevent attacks based on packet count?

zone protection profile

URL filtering profile

antivirus profile

vulnerability profile

DoS Protection adds another layer of defense against attacks on individual devices, which can succeed if the Zone Protection profile thresholds are above the CPS rate of the attack on the device.

Q124. What are three Palo Alto Networks best practices when implementing the DNS Security Service? (Choose three.)

Implement a threat intel program.

Configure a URL Filtering profile.

Train your staff to be security aware.

Rely on a DNS resolver.

Plan for mobile-employee risk

Q125. Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.

Exploitation

Installation

Reconnaissance

Act on Objective

Q126. Match the network device with the correct User-ID technology.

Explanation
Microsoft Exchange – Server monitoring
Linux authentication – syslog monitoring
Windows Client – client probing
Citrix client – Terminal Services agent

Loading …