PCNSA

Complete the statement. A security profile can block or allow traffic____________A . on unknown-tcp or unknown-udp trafficB . after it is matched by a security policy that allows trafficC . before it is matched by a security policyD . after it is matched by a security policy that allows or...

Which type of address object is "10 5 1 1/0 127 248 2"?A . IP subnetB . IP wildcard maskC . IP netmaskD . IP rangeView AnswerAnswer: B

Which two firewall components enable you to configure SYN flood protection thresholds? (Choose two.)A . QoS profileB . DoS Protection profileC . Zone Protection profileD . DoS Protection policyView AnswerAnswer: B,C

The Palo Alto Networks NGFW was configured with a single virtual router named VR-1 What changes are required on VR-1 to route traffic between two interfaces on the NGFW?A . Add zones attached to interfaces to the virtual routerB . Add interfaces to the virtual routerC . Enable the redistribution...

A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future Public Cloud environments. All other required connections have already been enabled between the USERS- and the OUTSIDE-zone . What configuration-changes should the Firewall-admin make?A . Create a custom-service-object called SERVICE-SSH for destination-port-TCP-22. Create a...

Four configuration choices are listed, and each could be used to block access to a specific URL. If you configured each choices to block the same URL then which choice would be the last to block access to the URL?A . EDL in URL Filtering Profile.B . Custom URL category...

Which two configuration settings shown are not the default? (Choose two.) A . Enable Security LogB . Server Log Monitor Frequency (sec)C . Enable SessionD . Enable ProbingView AnswerAnswer: B,C

Which option lists the attributes that are selectable when setting up an Application filters?A . Category, Subcategory, Technology, and CharacteristicB . Category, Subcategory, Technology, Risk, and CharacteristicC . Name, Category, Technology, Risk, and CharacteristicD . Category, Subcategory, Risk, Standard Ports, and TechnologyView AnswerAnswer: B

Given the scenario, which two statements are correct regarding multiple static default routes? (Choose two.) A . Path monitoring does not determine if route is useableB . Route with highest metric is actively usedC . Path monitoring determines if route is useableD . Route with lowest metric is actively usedView...

You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?A . Admin Role profileB . virtual routerC . DNS proxyD . service routeView AnswerAnswer: A