Question 151 · 407 in bank
An administrator would like to follow the best-practice approach to log the traffic that traverses the firewall. What action should they take?
Show answer
Answer: B
Palo Alto Networks Certified Network Security Administrator407 questions across 41 pages are complete and free, with no account or card.
407 questions in this bank
Free access · progress saved on this device
An administrator would like to follow the best-practice approach to log the traffic that traverses the firewall. What action should they take?
Answer: B
Which two protocols are available on a Palo Alto Networks Firewall Interface Management Profile? (Choose two.)
Answer: AD
A network administrator created an intrazone Security policy rule on the firewall. The source zones were set to IT. Finance, and HR. Which two types of traffic will the rule apply to? (Choose two)
Answer: CD
You receive notification about new malware that infects hosts through malicious files transferred by FTP. Which Security profile detects and protects your internal networks from this threat after you update your firewall’s threat signature database?
Answer: D
What does an application filter help you to do?
Answer: C
Correct. An application filter is an object that dynamically groups applications based on application attributes that you define, including category, subcategory, technology, risk factor, and characteristic. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/app-id/use-application-objects-in-policy/create-an-application-filter
Source: Adapted from community discussion — DlaEdu_Ex
Which action can be set in a URL Filtering Security profile to provide users temporary access to all websites in a given category using a provided password?
Answer: B
The user will see a response page indicating that a password is required to allow access to websites in the given category. With this option, the security administrator or help-desk person would provide a password granting temporary access to all websites in the given category. A log entry is generated in the URL Filtering log. The Override webpage doesn’t display properly on client systems configured to use a proxy server.
Source: Adapted from community discussion — Oteslar
Which type of address object is www.paloaltonetworks.com?
Answer: C
What are the requirements for using Palo Alto Networks EDL Hosting Service?
Answer: B
What are two valid selections within an Antivirus profile? (Choose two.)
Answer: BD
You can configure the following actions in an Antivirus Profiles: Default; Allow; Alert; Drop; Reset Client; Reset Server; Reset Both. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/policy/security-profiles
Source: Adapted from community discussion — DlaEdu_Ex
An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command- and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall's signature database has been updated? (Choose two.)
Answer: BC
I believe the key is in the question, when says Detect (spyware) and prevent (antivirus). Antivirus profiles protect against viruses, worms, and trojans as well as spyware downloads. Anti-Spyware profiles blocks spyware on compromised hosts from trying to phone-home or beacon out to external command-and-control (C2) servers, allowing you to detect malicious traffic leaving the network from infected clients.
Source: Adapted from community discussion — [Removed]
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSA practice, question 151. 407 questions available.
Version 1.0.0. How we source questions