100% Free Real Updated PCNSA Questions & Answers Pass Your Exam Easily [Q24-Q43]

4.7/5 - (4 votes)

100% Free Real Updated PCNSA Questions & Answers Pass Your Exam Easily

Easily To Pass New PCNSA Verified & Correct Answers

Q24. Which type of administrative role must you assign to a firewall administrator account, if the account must include a custom set of firewall permissions?

SAML

Multi-Factor Authentication

Role-based

Dynamic

Q25. Which setting is available to edit when a tag is created on the local firewall?

Location

Color

Order

Priority

Q26. Where in Panorama Would Zone Protection profiles be configured?

Shared

Templates

Device Groups

Panorama tab

Q27. An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory

Create an Application Group and add business-systems to it

Create an Application Filter and name it Office Programs, then filter it on the business-systems category

Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office

Q28. Arrange the correct order that the URL classifications are processed within the system.

Q29. Place the steps in the correct packet-processing order of operations.

Q30. How many zones can an interface be assigned with a Palo Alto Networks firewall?

two

three

four

one

Q31. Which five Zero Trust concepts does a Palo Alto Networks firewall apply to achieve an integrated approach to prevent threats? (Choose five.)

User identification

Filtration protection

Vulnerability protection

Antivirus

Application identification

Anti-spyware

Q32. Given the topology, which zone type should zone A and zone B to be configured with?

Layer3

Tap

Layer2

Virtual Wire

Q33. The NetSec Manager asked to create a new firewall Local Administrator profile with customized privileges named New_Admin. This new administrator has to authenticate without inserting any username or password to access the WebUI.
What steps should the administrator follow to create the New_Admin Administrator profile?

1. Set the Authentication profile to Local.
2. Select the “Use only client certificate authentication” check box.
3. Set Role to Role Based.

1. Select the “Use only client certificate authentication” check box.
2. Set Role to Dynamic.
3. Issue to the Client a Certificate with Certificate Name = New Admin

1. Select the “Use only client certificate authentication” check box.
2. Set Role to Dynamic.
3. Issue to the Client a Certificate with Common Name = New_Admin

1. Select the “Use only client certificate authentication” check box.
2. Set Role to Role Based.
3. Issue to the Client a Certificate with Common Name = New Admin

Q34. Your company occupies one floor in a single building you have two active directory domain controllers on a single networks the firewall s management plane is only slightly utilized.
Which user-ID agent sufficient in your network?

PAN-OS integrated agent deployed on the firewall

Windows-based agent deployed on the internal network a domain member

Citrix terminal server agent deployed on the network

Windows-based agent deployed on each domain controller

Q35. Which statement best describes the use of Policy Optimizer?

Policy Optimizer can display which Security policies have not been used in the last 90 days

Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications

Policy Optimizer can add or change a Log Forwarding profile for each Secunty policy selected

Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists Admins can then manually enable policies they want to keep and delete ones they want to remove

Q36. An administrator notices that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would the administrator need to monitor and block to mitigate the malicious activity?

branch office traffic

north-south traffic

perimeter traffic

east-west traffic

Q37.

Given the topology, which zone type should interface E1/1 be configured with?

Tap

Tunnel

Virtual Wire

Layer3

Q38. Given the scenario, which two statements are correct regarding multiple static default routes? (Choose two.)

Path monitoring does not determine if route is useable

Route with highest metric is actively used

Path monitoring determines if route is useable

Route with lowest metric is actively used

Q39. In the example security policy shown, which two websites fcked? (Choose two.)

Facebook

YouTube

Amazon

Q40. Which prevention technique will prevent attacks based on packet count?

zone protection profile

URL filtering profile

antivirus profile

vulnerability profile

Q41. Which order of steps is the correct way to create a static route?

1) Enter the route and netmask
2) Enter the IP address for the specific next hop
3) Specify the outgoing interface for packets to use to go to the next hop
4) Add an IPv4 or IPv6 route by name

1) Enter the route and netmask
2) Specify the outgoing interface for packets to use to go to the next hop
3) Enter the IP address for the specific next hop
4) Add an IPv4 or IPv6 route by name

1) Enter the IP address for the specific next hop
2) Enter the route and netmask
3) Add an IPv4 or IPv6 route by name
4) Specify the outgoing interface for packets to use to go to the next hop

1) Enter the IP address for the specific next hop
2) Add an IPv4 or IPv6 route by name
3) Enter the route and netmask
4) Specify the outgoing interface for packets to use to go to the next hop

Q42. A network administrator created an intrazone Security policy rule on the firewall. The source zones were set to IT. Finance, and HR.
Which two types of traffic will the rule apply to? (Choose two)

traffic between zone IT and zone Finance

traffic between zone Finance and zone HR

traffic within zone IT

traffic within zone HR

Q43. Based on the graphic which statement accurately describes the output shown in the server monitoring panel?