Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Palo Alto Networks Certified Network Security Administrator (PAN-OS 10.0) Practice Questions

Question # 11

Which action results in the firewall blocking network traffic without notifying the sender?

Options:

A.  

Deny

B.  

No notification

C.  

Drop

D.  

Reset Client

Discussion 0
Question # 12

In which stage of the Cyber-Attack Lifecycle would the attacker inject a PDF file within an email?

Options:

A.  

Weaponization

B.  

Reconnaissance

C.  

Installation

D.  

Command and Control

E.  

Exploitation

Discussion 0
Question # 13

Starting with PAN_OS version 9.1 which new type of object is supported for use within the user field of a security policy rule?

Options:

A.  

local username

B.  

dynamic user group

C.  

remote username

D.  

static user group

Discussion 0
Question # 14

Which interface type requires no routing or switching but applies Security or NAT policy rules before passing allowed traffic?

Options:

A.  

Layer 3

B.  

Virtual Wire

C.  

Tap

D.  

Layer 2

Discussion 0
Question # 15

Match the Cyber-Attack Lifecycle stage to its correct description.

Question # 15

Options:

Discussion 0
Question # 16

An administrator is configuring a NAT rule

At a minimum, which three forms of information are required? (Choose three.)

Options:

A.  

name

B.  

source zone

C.  

destination interface

D.  

destination address

E.  

destination zone

Discussion 0
Question # 17

Where within the firewall GUI can all existing tags be viewed?

Options:

A.  

Network > Tags

B.  

Monitor > Tags

C.  

Objects > Tags

D.  

Policies > Tags

Discussion 0
Question # 18

An administrator would like to apply a more restrictive Security profile to traffic for file sharing applications. The administrator does not want to update the Security policy or object when new applications are released.

Which object should the administrator use as a match condition in the Security policy?

Options:

A.  

the Content Delivery Networks URL category

B.  

the Online Storage and Backup URL category

C.  

an application group containing all of the file-sharing App-IDs reported in the traffic logs

D.  

an application filter for applications whose subcategory is file-sharing

Discussion 0
Question # 19

Palo Alto Networks firewall architecture accelerates content map minimizing latency using which two components'? (Choose two )

Options:

A.  

Network Processing Engine

B.  

Single Stream-based Engine

C.  

Policy Engine

D.  

Parallel Processing Hardware

Discussion 0
Question # 20

Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT.

Question # 20

Which Security policy rule will allow traffic to flow to the web server?

Options:

A.  

Untrust (any) to DMZ (10.1.1.100), web browsing -Allow

B.  

Untrust (any) to Untrust (1.1.1.100), web browsing - Allow

C.  

Untrust (any) to Untrust (10.1.1.100), web browsing -Allow

D.  

Untrust (any) to DMZ (1.1.1.100), web browsing - Allow

Discussion 0

PCNSA PDF

PCNSA PDF (Printable)
$46.5
$154.99

PCNSA Testing Engine

PCNSA PDF (Printable)
$51
$169.99

PCNSA PDF + Testing Engine

PCNSA PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions