Question 311 · 407 in bank
Select 3What are three ways application characteristics are used? (Choose three.)
Show answer
Answer: ABE
Palo Alto Networks Certified Network Security Administrator407 questions across 41 pages are complete and free, with no account or card.
407 questions in this bank
Free access · progress saved on this device
What are three ways application characteristics are used? (Choose three.)
Answer: ABE
In which two Security Profiles can an action equal to the block IP feature be configured? (Choose two.)
Answer: CD
When is an event displayed under threat logs?
Answer: A
I think the A . A Threat log displays entries when the traffic matches one of the Security profiles attached to a Security policy rule on the firewall.
Source: Adapted from community discussion — a2mhkzz
Which user mapping method could be used to discover user IDs in an environment with multiple Windows domain controllers?
Answer: D
A is correct. In an AD environment, you can configure the User-ID agent to monitor the security logs for Kerberos ticket grants or renewals, Exchange server access (if configured), and file and print service connections. For these events to be recorded in the security log, the AD domain must be configured to log successful account login events. In addition, because users can log in to any of the servers in the domain, you must set up server monitoring for all servers to capture all user login events. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/user-id/user-id-concepts/user-mapping/server-monitoring.html#id89aad143-05b8-4805-8e7c-b123994edd30
Source: Adapted from community discussion — Cyril_the_Squirl
In which section of the PAN-OS GUI does an administrator configure URL Filtering profiles?
Answer: C
Like a2mhkzz said: Step 1: Create a URL Filtering profile. Select Objects > Security Profiles > URL Filtering and Add or modify a URL Filtering profile.
Source: Adapted from community discussion — notus
Which profile should be used to obtain a verdict regarding analyzed files?
Answer: C
C is correct WildFire Analysis Profiles Use a WildFire Analysis profile to enable the firewall to forward unknown files or email links for WildFire analysis. Specify files to be forwarded for analysis based on application, file type, and transmission direction (upload or download). Files or email links matched to the profile rule are forwarded to either the WildFire public cloud or the WildFire private cloud (hosted with a WF-500 appliance), depending on the analysis location defined for the rule. If a profile rule is set to forward files to the WildFire public cloud, the firewall also forwards files that match existing antivirus signatures, in addition to unknown files.
Source: Adapted from community discussion — gabbar
In which three places on the PAN-OS interface can the application characteristics be found? (Choose three.)
Answer: ACD
ACD - A. Objects tab > Applications1 C. Objects tab > Application Filters1 D. ACC tab > Global Filters1 Objects tab > Applications: This is where you can define new applications and view or modify the characteristics of existing applications1. Objects tab > Application Filters: Application filters dynamically group applications based on application attributes that you define, including category, subcategory, technology, risk factor, and characteristic1. ACC tab > Global Filters: The Application Command Center (ACC) uses application characteristics as a global filter to provide visibility and control of the applications in use across all users and devices in all locations1
Source: Adapted from community discussion — cjace
Where within the firewall GUI can an administrator create a local user database?
Answer: D
D is correct. Add the user account to the local database. Select DeviceLocal User DatabaseUsers and click Add. Enter a user Name for the administrator. Enter a Password and Confirm Password or enter a Password Hash. Enable the account (enabled by default) and click OK.
Source: Adapted from community discussion — gabbar
How are service routes used in PAN-OS?
Answer: D
How can a complete overview of the logs be displayed to an administrator who has permission in the system to view them?
Answer: A
A The best way to view a complete overview of the logs is to select the unified log entry in the side menu.The unified log is a single view that displays all the logs generated by the firewall, such as traffic, threat, URL filtering, data filtering, and WildFire logs1.The unified log allows the administrator to filter, sort, and export the logs based on various criteria, such as time range, severity, source, destination, application, or action1. Modifying the number of columns visible on the page or the number of logs visible on each page does not provide a complete overview of the logs, but only changes the display settings of the current log view.Selecting the system logs entry in the side menu does not show all the logs generated by the firewall, but only shows the logs related to system events, such as configuration changes, system alerts, or HA status2.
Source: Adapted from community discussion — fujitest
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSA practice, question 311. 407 questions available.
Version 1.0.0. How we source questions