Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Palo Alto Networks Certified Network Security Administrator (PAN-OS 10.0) Practice Questions

Question # 21

What in the minimum frequency for which you can configure the firewall too check for new wildfire antivirus signatures?

Options:

A.  

every 5 minutes

B.  

every 1 minute

C.  

every 24 hours

D.  

every 30 minutes

Discussion 0
Question # 22

You need to allow users to access the office–suite application of their choice. How should you configure the firewall to allow access to any office-suite application?

Options:

A.  

Create an Application Group and add Office 365, Evernote Google Docs and Libre Office

B.  

Create an Application Group and add business-systems to it.

C.  

Create an Application Filter and name it Office Programs, then filter it on the office programs subcategory.

D.  

Create an Application Filter and name it Office Programs then filter on the business-systems category.

Discussion 0
Question # 23

Which statement best describes a common use of Policy Optimizer?

Options:

A.  

Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications.

B.  

Policy Optimizer can add or change a Log Forwarding profile for each Security policy selected.

C.  

Policy Optimizer can display which Security policies have not been used in the last 90 days.

D.  

Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists. Admins can then manually enable policies they want to keep and delete ones they want to remove.

Discussion 0
Question # 24

What are three valid ways to map an IP address to a username? (Choose three.)

Options:

A.  

using the XML API

B.  

DHCP Relay logs

C.  

a user connecting into a GlobalProtect gateway using a GlobalProtect Agent

D.  

usernames inserted inside HTTP Headers

E.  

WildFire verdict reports

Discussion 0
Question # 25

Which three types of authentication services can be used to authenticate user traffic flowing through the firewalls data plane? (Choose three )

Options:

A.  

TACACS

B.  

SAML2

C.  

SAML10

D.  

Kerberos

E.  

TACACS+

Discussion 0
Question # 26

Which two matching criteria are used when creating a Security policy involving NAT? (Choose two.)

Options:

A.  

Post-NAT address

B.  

Post-NAT zone

C.  

Pre-NAT zone

D.  

Pre-NAT address

Discussion 0
Question # 27

What can be achieved by selecting a policy target prior to pushing policy rules from Panorama?

Options:

A.  

Doing so limits the templates that receive the policy rules

B.  

Doing so provides audit information prior to making changes for selected policy rules

C.  

You can specify the firewalls m a device group to which to push policy rules

D.  

You specify the location as pre can - or post-rules to push policy rules

Discussion 0
Question # 28

Which administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact and command-and-control (C2) server.

Which security profile components will detect and prevent this threat after the firewall`s signature database has been updated?

Options:

A.  

antivirus profile applied to outbound security policies

B.  

data filtering profile applied to inbound security policies

C.  

data filtering profile applied to outbound security policies

D.  

vulnerability profile applied to inbound security policies

Discussion 0
Question # 29

Which Palo Alto networks security operating platform service protects cloud-based application such as Dropbox and salesforce by monitoring permissions and shared and scanning files for Sensitive information?

Options:

A.  

Prisma SaaS

B.  

AutoFocus

C.  

Panorama

D.  

GlobalProtect

Discussion 0
Question # 30

An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

Options:

A.  

Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory

B.  

Create an Application Group and add business-systems to it

C.  

Create an Application Filter and name it Office Programs, then filter it on the business-systems category

D.  

Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office

Discussion 0

PCNSA PDF

PCNSA PDF (Printable)
$46.5
$154.99

PCNSA Testing Engine

PCNSA PDF (Printable)
$51
$169.99

PCNSA PDF + Testing Engine

PCNSA PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions