[May-2022] Palo Alto Networks PCNSA Dumps – Secret To Pass in First Attempt [Q75-Q99]

NO.75 In which profile should you configure the DNS Security feature?

NO.76 Which three configuration settings are required on a Palo Alto Network firewall management interface?
(Choose three.)

NO.77 Which two statements are correct about App-ID content updates? (Choose two.)

NO.78 Which action results in the firewall blocking network traffic with out notifying the sender?

NO.79 Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT.

Which Security policy rule will allow traffic to flow to the web server?

NO.80 Match the cyber-attack lifecycle stage to its correct description.

NO.81 Given the network diagram, traffic should be permitted for both Trusted and Guest users to access general Internet and DMZ servers using SSH. web-browsing and SSL applications Which policy achieves the desired results?
A)

B)

C)

D)

NO.82 What is considered best practice with regards to committing configuration changes?

NO.83 Match the Cyber-Attack Lifecycle stage to its correct description.

NO.84 At which stage of the cyber-attack lifecycle would the attacker attach an infected PDF file to an email?

NO.85 An administrator notices that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would the administrator need to monitor and block to mitigate the malicious activity?

NO.86 Which path in PAN-OS 10.0 displays the list of port-based security policy rules?

NO.87 The firewall sends employees an application block page when they try to access Youtube.
Which Security policy rule is blocking the youtube application?

NO.88 Which path is used to save and load a configuration with a Palo Alto Networks firewall?

NO.89 Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.

NO.90 An administrator notices that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would the administrator need to monitor and block to mitigate the malicious activity?

NO.91 Actions can be set for which two items in a URL filtering security profile? (Choose two.)

NO.92 Which type of firewall configuration contains in-progress configuration changes?

NO.93 Which two configuration settings shown are not the default? (Choose two.)

NO.94 Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.

Which two Security policy rules will accomplish this configuration? (Choose two.)

NO.95 How do you reset the hit count on a security policy rule?

NO.96 Which statements is true regarding a Heatmap report?

NO.97 A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base.
On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.
Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

NO.98 Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?

NO.99 Which protocol used to map username to user groups when user-ID is configured?