Discount Offer
Go Back on PCNSA Exam
Available in 1, 3, 6 and 12 Months Free Updates Plans
PDF: $15 $60

Test Engine: $20 $80

PDF + Engine: $25 $99



Pass exam with Dumps4free or we will provide you with three additional months of access for FREE.

PCNSA Practice Test


Page 1 out of 6 Pages

Which built-in IP address EDL would be useful for preventing traffic from IP addresses that are verified as unsafe based on WildFire analysis Unit 42 research and data gathered from telemetry?


A. Palo Alto Networks C&C IP Addresses


B. Palo Alto Networks Bulletproof IP Addresses


C. Palo Alto Networks High-Risk IP Addresses


D. Palo Alto Networks Known Malicious IP Addresses





D.
  Palo Alto Networks Known Malicious IP Addresses


Explanation:

• Palo Alto Networks Known Malicious IP Addresses —Contains IP addresses that are verified malicious based on WildFire analysis, Unit 42 research, and data gathered from telemetry (Share Threat Intelligence with Palo Alto Networks). Attackers use these IP addresses almost exclusively to distribute malware, initiate command-and-control activity, and launch attacks.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/built-in-edls

What is the correct process tor creating a custom URL category?


A. Objects > Security Profiles > URL Category > Add


B. Objects > Custom Objects > URL Filtering > Add


C. Objects > Security Profiles > URL Filtering > Add


D. Objects > Custom Objects > URL Category > Add





D.
  Objects > Custom Objects > URL Category > Add


What are two valid selections within an Anti-Spyware profile? (Choose two.)


A. Default


B. Deny


C. Random early drop


E. Drop





A.
  Default


D.
  

Explanation:

Deny is a policy action, random early drop is part of the inner workings of DoS protection

Which two features can be used to tag a user name so that it is included in a dynamic user group? (Choose two)


A. XML API


B. log forwarding auto-tagging


C. GlobalProtect agent


D. User-ID Windows-based agent





A.
  XML API


D.
  User-ID Windows-based agent


Explanation:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/url-filtering-concepts/url-filtering-profile-actions

Which interface type is used to monitor traffic and cannot be used to perform traffic shaping?


A. Layer 2


B. Tap


C. Layer 3


D. Virtual Wire





B.
  Tap



Page 1 out of 6 Pages