PCNSA

How many zones can an interface be assigned with a Palo Alto Networks firewall?A . twoB . threeC . fourD . oneView AnswerAnswer: D Explanation: Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/network/network­zones/security-zone-overview

Which plane on a Palo Alto Networks Firewall provides configuration, logging, and reporting functions on a separate processor?A . managementB . network processingC . dataD . security processingView AnswerAnswer: A

Complete the statement. A security profile can block or allow traffic.A . on unknown-tcp or unknown-udp trafficB . after it is evaluated by a security policy that allows trafficC . before it is evaluated by a security policyD . after it is evaluated by a security policy that allows or...

DRAG DROP Match the Palo Alto Networks Security Operating Platform architecture to its description. View AnswerAnswer:

Which User-ID agent would be appropriate in a network with multiple WAN links, limited network bandwidth, and limited firewall management plane resources?A . Windows-based agent deployed on the internal networkB . PAN-OS integrated agent deployed on the internal networkC . Citrix terminal server deployed on the internal networkD . Windows-based...

Which User-ID mapping method should be used for an environment with clients that do not authenticate to Windows Active Directory?A . Windows session monitoring via a domain controllerB . passive server monitoring using the Windows-based agentC . Captive PortalD . passive server monitoring using a PAN-OS integrated User-ID agentView AnswerAnswer:...

Which option shows the attributes that are selectable when setting up application filters?A . Category, Subcategory, Technology, and CharacteristicB . Category, Subcategory, Technology, Risk, and CharacteristicC . Name, Category, Technology, Risk, and CharacteristicD . Category, Subcategory, Risk, Standard Ports, and TechnologyView AnswerAnswer: B Explanation: Reference: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-web-interface-help/objects/objects­application-filters

Which statement is true regarding a Best Practice Assessment?A . The BPA tool can be run only on firewallsB . It provides a percentage of adoption for each assessment areaC . The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus...

DRAG DROP Match the Cyber-Attack Lifecycle stage to its correct description. View AnswerAnswer:

An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?A . Create an Application Filter and name it Office Programs, then filter it on the business-systems category, office-programs subcategoryB . Create an Application...