PCNSA practice questions 371–380

1. Question 371 · 407 in bank

   Which Security Profile can provide protection against ICMP floods, based on individual combinations of a packet's source and destination IP addresses?

   • ADoS protection
   • BURL filtering
   • Cpacket buffering
   • Danti-spyware

   Show answer

   Answer: A

   Explanation

   https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules/dos-protection-profiles DoS Protection profiles protect specific devices (classified profiles) and groups of devices (aggregate profiles) against SYN, UDP, ICMP, ICMPv6, and Other IP flood attacks DoS protection profiles and policy rules are granular and targeted, and can even be classified to a single device (IP address)

   Source: Adapted from community discussion — [Removed]

   References

   • docs.paloaltonetworks.com documentation

   Next question

2. Question 372 · 407 in bank

   Which path in PAN-OS 9.0 displays the list of port-based security policy rules?

   • APolicies> Security> Rule Usage> No App Specified
   • BPolicies> Security> Rule Usage> Port only specified
   • CPolicies> Security> Rule Usage> Port-based Rules
   • DPolicies> Security> Rule Usage> Unused Apps

   Show answer

   Answer: A

   Explanation

   All the options are wrong : the correct path is :::::: Policies ---- Security -------- Policy Optimizer ------------ No Apps Specified

   Source: Adapted from community discussion — deepu

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

3. Question 373 · 407 in bank

   Select 2

   Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)

   • ALayer-ID
   • BUser-ID
   • CQoS-ID
   • DApp-ID

   Show answer

   Answer: BD

   Next question

4. Question 374 · 407 in bank

   Which path is used to save and load a configuration with a Palo Alto Networks firewall?

   • ADevice>Setup>Services
   • BDevice>Setup>Management
   • CDevice>Setup>Operations
   • DDevice>Setup>Interfaces

   Show answer

   Answer: C

   Next question

5. Question 375 · 407 in bank

   DRAG DROP - Match the network device with the correct User-ID technology. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • docs.paloaltonetworks.com documentation

   

   Next question

6. Question 376 · 407 in bank

   Which option shows the attributes that are selectable when setting up application filters?

   • ACategory, Subcategory, Technology, and Characteristic
   • BCategory, Subcategory, Technology, Risk, and Characteristic
   • CName, Category, Technology, Risk, and Characteristic
   • DCategory, Subcategory, Risk, Standard Ports, and Technology

   Show answer

   Answer: B

   Explanation

   https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/objects/objects-application-filters The filtering is successive: category filters are applied first followed by subcategory filters, technology filters, risk filters, tags, and then characteristic filters

   Source: Adapted from community discussion — nicky6th

   References

   • docs.paloaltonetworks.com documentation

   Next question

7. Question 377 · 407 in bank

   Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?

   • AReview Policies
   • BReview Apps
   • CPre-analyze
   • DReview App Matches

   Show answer

   Answer: A

   Explanation

   After downloading and installing a ne w content release with new and upda ted application signatures, click Review Policies to review their policy impact. During a policy review, application signatures are compared against policy rules in the candidate configuration. [Palo Alto Networks]

   Source: Adapted from community discussion — BeforeScope

   Next question

8. Question 378 · 407 in bank

   How do you reset the hit count on a Security policy rule?

   • ASelect a Security policy rule, and then select Hit Count > Reset.
   • BReboot the data-plane.
   • CFirst disable and then re-enable the rule.
   • DType the CLI command reset hitcount <POLICY-NAME>.

   Show answer

   Answer: A

   Next question

9. Question 379 · 407 in bank

   

   Given the topology, which zone type should you configure for firewall interface E1/1?

   • ATap
   • BTunnel
   • CVirtual Wire
   • DLayer3

   Show answer

   Answer: A

   Next question

10. Question 380 · 407 in bank

    Which interface type is part of a Layer 3 zone with a Palo Alto Networks firewall?

    • AManagement
    • BHigh Availability
    • CAggregate
    • DAggregation

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCNSA practice, question 371. 407 questions available.