Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free Paloalto Networks PCNSA Practice Exam with Questions & Answers | Set: 6

Questions 51

Which user mapping method could be used to discover user IDs in an environment with multiple Windows domain controllers?

Options:
A.

Active Directory monitoring

B.

Windows session monitoring

C.

Windows client probing

D.

domain controller monitoring

Questions 52

An administrator wants to prevent access to media content websites that are risky

Which two URL categories should be combined in a custom URL category to accomplish this goal? (Choose two)

Options:
A.

streaming-media

B.

high-risk

C.

recreation-and-hobbies

D.

known-risk

Questions 53

Which Security profile would you apply to identify infected hosts on the protected network uwall user database?

Options:
A.

Anti-spyware

B.

Vulnerability protection

C.

URL filtering

D.

Antivirus

Questions 54

The NetSec Manager asked to create a new firewall Local Administrator profile with customized privileges named NewAdmin. This new administrator has to authenticate without inserting any username or password to access the WebUI.

What steps should the administrator follow to create the New_Admin Administrator profile?

Options:
A.

1. Select the "Use only client certificate authentication" check box.

2. Set Role to Role Based.

3. Issue to the Client a Certificate with Common Name = NewAdmin

B.

1. Select the "Use only client certificate authentication" check box.

2. Set Role to Dynamic.

3. Issue to the Client a Certificate with Certificate Name = NewAdmin

C.

1. Set the Authentication profile to Local.

2. Select the "Use only client certificate authentication" check box.

3. Set Role to Role Based.

D.

1. Select the "Use only client certificate authentication" check box.

2. Set Role to Dynamic.

3. Issue to the Client a Certificate with Common Name = New Admin

Questions 55

Recently changes were made to the firewall to optimize the policies and the security team wants to see if those changes are helping.

What is the quickest way to reset the hit counter to zero in all the security policy rules?

Options:
A.

At the CLI enter the command reset rules and press Enter

B.

Highlight a rule and use the Reset Rule Hit Counter > Selected Rules for each rule

C.

Reboot the firewall

D.

Use the Reset Rule Hit Counter > All Rules option

Questions 56

An address object of type IP Wildcard Mask can be referenced in which part of the configuration?

Options:
A.

Security policy rule

B.

ACC global filter

C.

external dynamic list

D.

NAT address pool

Questions 57

Which CLI command will help confirm if FQDN objects are resolved in the event there is a shadow rule?

Options:
A.

>show system fqdn

B.

>request fqdn show system

C.

>request show system fqdn

D.

>request system fqdn show

Questions 58

Which objects would be useful for combining several services that are often defined together?

Options:
A.

shared service objects

B.

service groups

C.

application groups

D.

application filters

Questions 59

Which path in PAN-OS 10.2 is used to schedule a content update to managed devices using Panorama?

Options:
A.

Panorama > Device Deployment > Dynamic Updates > Schedules > Add

B.

Panorama > Device Deployment > Content Updates > Schedules > Add

C.

Panorama > Dynamic Updates > Device Deployment > Schedules > Add

D.

Panorama > Content Updates > Device Deployment > Schedules > Add

Questions 60

Which action results in the firewall blocking network traffic with out notifying the sender?

Options:
A.

Drop

B.

Deny

C.

Reset Server

D.

Reset Client