Question 261 · 407 in bank
Which setting is available to edit when a tag is created on the local firewall?
Show answer
Answer: A
PCNSAAssociatePalo Alto NetworksAll questions freePage 27 of 41
PCNSA practice questions 261–270
Palo Alto Networks Certified Network Security Administrator407 questions across 41 pages are complete and free, with no account or card.
Official study references
407 questions in this bank
Free access · progress saved on this device
Question 262 · 407 in bank
With the PAN-OS 11.0 Nova release, which two attack options can new inline deep learning analysis engines detect and prevent? (Choose two.)
Show answer
Answer: A
Explanation
answer = C https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/content-inspection-features/vuln-protection-inline-cloud-analysis Palo Alto Networks now operates new inline deep learning detection engines in the Advanced Threat Prevention cloud to analyze traffic for command injection and SQL injection vulnerabilities in real-time to protect users against zero-day threats. By operating cloud-based detection engines, you can access a wide array of detection mechanisms that are updated and deployed automatically without requiring the user to download update packages or operate process intensive, firewall-based analyzers which can sap resources. Inline cloud analysis for your firewall Vulnerability Protection profile supports two analysis engines: SQL injection and Command injection. Additional analysis models are delivered through content updates, however, enhancements to existing models are performed as a cloud-side update, requiring no firewall update. Inline cloud analysis is enabled and configured using the Vulnerability Protection profile and requires an active Advanced Threat Prevention license.
Source: Adapted from community discussion — baccalacca
References
Question 263 · 407 in bank
Which profile must be applied to the Security policy rule to block spyware on compromised hosts from trying to phone-home or beacon out to external command-and-control (C2) servers?
Show answer
Answer: A
Explanation
Mostly because the admin will not know what websites the compromised hosts will communicate with so using the URL filtering profile will not be effective. The Anti Spyware sec profile however will sort you out fine, it's the chef's kiss in this situation!!!!
Source: Adapted from community discussion — DatITGuyTho1337
References
Question 264 · 407 in bank
Which feature dynamically analyzes and detects malicious content by evaluating various web page details using a series of machine learning (ML) models?
Show answer
Answer: B
Explanation
URL Filtering local inline categorization (previously known as inline ML) enables the firewall dataplane to apply machine learning on webpages to alert users when phishing variants are detected while preventing malicious variants of JavaScript exploits from entering your network. Local inline categorization dynamically analyzes and detects malicious content by evaluating various web page details using a series of ML models.
Source: Adapted from community discussion — Kariamma
References
Question 265 · 407 in bank
An administrator is troubleshooting an issue with Office365 and expects that this traffic traverses the firewall. When reviewing Traffic Log entries, there are no logs matching traffic from the test workstation. What might cause this issue?
Show answer
Answer: C
Explanation
I think it is C. The admin EXPECTS the traffic to go through the firewall but if the traffic matches the default INTERZONE rule it will be blocked and no log will be generated, making initial troubleshooting trickier than it should be.
Source: Adapted from community discussion — DatITGuyTho1337
Question 266 · 407 in bank
When creating an address object, which option is available to select from the Type drop-down menu?
Show answer
Answer: B
Question 267 · 407 in bank
Ethernet 2/1 has an IP Address of 10.0 1 2 in Zone ‘trust’ (LAN). If both interfaces are connected to the same virtual router, which IP address information will an administrator need to enter in the Destination field to access the internet?
Show answer
Answer: D
Question 268 · 407 in bank
Where within the URL Filtering security profile must a user configure the action to prevent credential submissions?
Show answer
Answer: A
Explanation
URL filtering technology protects users from web-based threats by providing granular control over user access and interaction with content on the Internet. You can develop a URL filtering policy that limits access to sites based on URL categories, users, and groups. For example, you can block access to sites known to host malware and prevent end users from entering corporate credentials to sites in certain categories.
Source: Adapted from community discussion — awtsuritacuna
Question 269 · 407 in bank
Which Security profile must be added to Security policies to enable DNS Signatures to be checked?
Show answer
Answer: C
Explanation
Yes..correct.. "In addition, you can enable the DNS sinkholing action in Anti-Spyware profiles to enable the firewall to forge a response to a DNS query for a known malicious domain, causing the malicious domain name to resolve to an IP address that you define" https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/policy/security-profiles
Source: Adapted from community discussion — Kalender
References
Question 270 · 407 in bank
Select 2Which two Security profile actions can only be applied to DoS Protection profiles? (Choose two.)
Show answer
Answer: CD
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSA practice, question 261. 407 questions available.
About this question bank
Version 1.0.0. How we source questions