Question 271 · 407 in bank
Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?
Show answer
Answer: C
PCNSAAssociatePalo Alto NetworksAll questions freePage 28 of 41
PCNSA practice questions 271–280
Palo Alto Networks Certified Network Security Administrator407 questions across 41 pages are complete and free, with no account or card.
Official study references
407 questions in this bank
Free access · progress saved on this device
Question 272 · 407 in bank
Where can you apply URL Filtering policy in a Security policy rule?
Show answer
Answer: D
Question 273 · 407 in bank
Which interface types are assigned to IEEE 802.1Q VLANs?
Show answer
Answer: B
Explanation
According to https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/network/network-interfaces Both B and C are possibilities, but my CCNA kneejerk reaction would choose B. However, since you can do it at layer 3 (for the same money, "everything" layer 3 was more expensive in the past) and layer 2 is more vulnerable... . TBH this question should have a "choose two" option because neither can be excluded definetively.
Source: Adapted from community discussion — Blender808
Question 274 · 407 in bank
Select 3Which three factors can be used to create malware based on domain generation algorithms? (Choose three.)
Show answer
Answer: ACD
References
Question 275 · 407 in bank
Which action column is available to edit in the Action tab of an Antivirus security profile?
Show answer
Answer: B
Explanation
I see under Antivirus Profile /Action Tab: "Signature Action", "Wildfire Signature Action" and "Wildfire Inline ML Action". so I think the answer should be "Signature".
Source: Adapted from community discussion — stxc
References
Question 276 · 407 in bank
Given the detailed log information above, what was the result of the firewall traffic inspection?
Show answer
Answer: D
Question 277 · 407 in bank
When configuring a security policy, what is a best practice for User-ID?
Show answer
Answer: D
Explanation
D. Deny WMI traffic from the User-ID agent to any external zone1 WMI, or Windows Management Instrumentation, is a mechanism that can be used to actively probe managed Windows systems to learn IP-user mappings1. Because WMI probing trusts data reported back from the endpoint, it is not a recommended method of obtaining User-ID information in a high-security network1. On sensitive and high-security networks, WMI probing increases the overall attack surface, and administrators are recommended to disable WMI probing and instead rely upon User-ID mappings obtained from more isolated and trusted sources, such as domain controllers
Source: Adapted from community discussion — cjace
Question 278 · 407 in bank
Select 2What are three DNS policy actions? (Choose three.)
Show answer
Answer: AB
Explanation
ABDE Policy Action Choose an action to take when DNS lookups are made to known malware sites. The options are alert, allow, block, or sinkhole. The default action for Palo Alto Networks DNS signatures is sinkhole. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/objects/objects-security-profiles-anti-spyware-profile
Source: Adapted from community discussion — DlaEdu_Ex
Question 279 · 407 in bank
Which System log severity level would be displayed as a result of a user password change?
Show answer
Answer: A
Explanation
System logs display entries for each system event on the firewall. 1. Critical - Hardware failures, including high availability (HA) failover and link failures. 2. High - Serious issues, including dropped connections with external devices, such as LDAP and RADIUS servers. 3. Medium - Mid-level notifications, such as antivirus package upgrades. 4. Low - Minor severity notifications, such as user password changes. 5. Informational - Log in/log off, administrator name or password change, any configuration change, and all other events not covered by the other severity levels. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/monitoring/view-and-manage-logs/log-types-and-severity-levels/system-logs#id8edbfdae-ed92-4d8e-ab76-6a38f96e8cb1
Source: Adapted from community discussion — DlaEdu_Ex
References
Question 280 · 407 in bank
An administrator would like to block traffic to all high risk audio streaming applications, including new App-IDs introduced with content updates. Which filter should the administrator configure in the application filter object?
Show answer
Answer: C
References
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSA practice, question 271. 407 questions available.
About this question bank
Version 1.0.0. How we source questions