Question 231 · 407 in bank
Select 2What are the two types of Administrator accounts? (Choose two.)
PCNSAAssociatePalo Alto NetworksAll questions freePage 24 of 41
PCNSA practice questions 231–240
Palo Alto Networks Certified Network Security Administrator407 questions across 41 pages are complete and free, with no account or card.
Official study references
407 questions in this bank
Free access · progress saved on this device
Question 232 · 407 in bank
The Net Sec Manager asked to create a new Firewall Operator profile with customized privileges. In particular, the new firewall operator should be able to: Check the configuration with read-only privilege for LDAP, RADIUS, TACACS+, and SAML as Server profiles to be used inside an Authentication profile. The firewall operator should not be able to access anything else. What is the right path m order to configure the new firewall Administrator Profile?
Show answer
Answer: A
References
Question 233 · 407 in bank
Select 3Within the WildFire Analysis profile, which three items are configurable? (Choose three.)
Show answer
Answer: ABD
Explanation
Use a WildFire Analysis profile to specify for WildFire file analysis to be performed locally on the WildFire appliance or in the WildFire cloud. You can specify traffic to be forwarded to the public cloud or private cloud based on file type, application, or the transmission direction of the file (upload or download). After creating a WildFire analysis profile, adding the profile to a policy (PoliciesSecurity) further allows you apply the profile settings to any traffic matched to that policy (for example, a URL category defined in the policy). https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/objects/objects-security-profiles-wildfire-analysis
Source: Adapted from community discussion — DlaEdu_Ex
Question 234 · 407 in bank
Which Security profile can be used to configure sinkhole IPs m the DNS Sinkhole settings?
Show answer
Answer: B
Question 235 · 407 in bank
Select 3Which three management interface settings must be configured for functional dynamic updates and administrative access on a Palo Alto Networks firewall? (Choose three.)
Show answer
Answer: ABD
Explanation
For a Palo Alto Networks firewall to perform dynamic updates and provide administrative access, it crucially needs to have NTP, an IP address, and a DNS server correctly configured. Explanation: The three management interface settings that must be configured for functional dynamic updates and administrative access on a Palo Alto Networks firewall are: NTP (Network Time Protocol): Ensures that the firewall has the correct time, which is crucial for logging, reporting, and synchronization with other devices for security functions. IP address: Necessary for the management interface to be reachable for administrative tasks and to establish communication with external servers for updates. DNS server: Required to resolve hostnames for update servers and other administrative functions, facilitating dynamic updates. While MTU (Maximum Transmission Unit) and service routes are also important settings, they are not as critical as NTP, IP address, and DNS server for the specific functions of dynamic updates and administrative access.
Source: Adapted from community discussion — MoSayel
Question 236 · 407 in bank
How does the Policy Optimizer policy view differ from the Security policy view?
Show answer
Answer: A
Explanation
You can’t filter or sort rules in PoliciesSecurity because that would change the order of the policy rules in the rulebase. Filtering and sorting PoliciesSecurityPolicy OptimizerNo App Specified, PoliciesSecurityPolicy OptimizerUnused Apps, and PoliciesSecurityPolicy OptimizerNew App Viewer (if you have a SaaS Inline Security subscription) does not change the order of the rules in the rulebase. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/app-id/security-policy-rule-optimization/policy-optimizer-concepts/sorting-and-filtering-security-policy-rules
Source: Adapted from community discussion — [Removed]
Question 237 · 407 in bank
An administrator creates a new Security policy rule to allow DNS traffic from the LAN to the DMZ zones. The administrator does not change the rule type from its default value. What type of Security policy rule is created?
Show answer
Answer: C
Question 238 · 407 in bank
Given the topology, which zone type should zone A and zone B to be configured with?
Show answer
Answer: A
Explanation
The key here is the virtual router in the middle. This means that the subnets on the sides are different. So the answer for me is Layer3.
Source: Adapted from community discussion — Jheax
Question 239 · 407 in bank
What do application filters help provide access to?
Show answer
Answer: B
Explanation
b n application filter is an object that dynamically groups applications based on application attributes that you define, including category, subcategory, technology, risk factor, and characteristic. This is useful when you want to safely enable access to applications that you do not explicitly sanction, but that you want users to be able to access. For example, you may want to enable employees to choose their own office programs (such as Evernote, Google Docs, or Microsoft Office 365) for business use. To safely enable these types of applications, you could create an application filter that matches on the Category business-systems and the Subcategory office-programs. As new applications office programs emerge and new App-IDs get created, these new applications will automatically match the filter you defined; you will not have to make any additional changes to your policy rulebase to safely enable any application that matches the attributes you defined for the filter.
Source: Adapted from community discussion — baccalacca
References
Question 240 · 407 in bank
What is the function of an application group object?
Show answer
Answer: A
Explanation
Answer A An application group is an object that contains applications that you want to treat similarly in policies. ref: https://docs.paloaltonetworks.com/network-security/security-policy/objects/application-groups
Source: Adapted from community discussion — fb48
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSA practice, question 231. 407 questions available.
About this question bank
Version 1.0.0. How we source questions