PCNSA practice questions 401–407

1. Question 401 · 407 in bank

   Access to which feature requires the PAN-OS Filtering license?

   • APAN-DB database
   • BDNS Security
   • CCustom URL categories
   • DURL external dynamic lists

   Show answer

   Answer: A

   Explanation

   Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/getting-started/activate-licenses-and-subscriptions.html

   Next question

2. Question 402 · 407 in bank

   Based on the screenshot, what is the purpose of the Included Groups?

   

   • AThey are groups that are imported from RADIUS authentication servers.
   • BThey are the only groups visible based on the firewall's credentials.
   • CThey contain only the users you allow to manage the firewall.
   • DThey are used to map users to groups.

   Show answer

   Answer: D

   Explanation

   agreed with ALCOSTA35, but the most "logic" it actually D (it excludes A B C). People making these kind of questions should be sued.

   Source: Adapted from community discussion — ploiesti

   Next question

3. Question 403 · 407 in bank

   Based on the graphic, which statement accurately describes the output shown in the Server Monitoring panel?

   

   • AThe User-ID agent is connected to a domain controller labeled lab-client.
   • BThe host lab-client has been found by the User-ID agent.
   • CThe host lab-client has been found by a domain controller.
   • DThe User-ID agent is connected to the firewall labeled lab-client.

   Show answer

   Answer: A

   Explanation

   lab-client is not a host, it is the name we are giving to the agent that is connecting to the specified domain controller (Active Directory)

   Source: Adapted from community discussion — gustavok

   Next question

4. Question 404 · 407 in bank

   What do Dynamic User Groups help you to do?

   • Acreate a policy that provides auto-remediation for anomalous user behavior and malicious activity
   • Bcreate a dynamic list of firewall administrators
   • Ccreate a QoS policy that provides auto-remediation for anomalous user behavior and malicious activity
   • Dcreate a policy that provides auto-sizing for anomalous user behavior and malicious activity

   Show answer

   Answer: A

   References

   • docs.paloaltonetworks.com documentation

   Next question

5. Question 405 · 407 in bank

   Which type of security policy rule will match traffic that flows between the Outside zone and inside zone, but would not match traffic that flows within the zones?

   • Aglobal
   • Bintrazone
   • Cinterzone
   • Duniversal

   Show answer

   Answer: C

   Next question

6. Question 406 · 407 in bank

   You notice that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would you need to monitor and block to mitigate the malicious activity?

   

   • Abranch office traffic
   • Bnorth-south traffic
   • Cperimeter traffic
   • Deast-west traffic

   Show answer

   Answer: D

   Next question

7. Question 407 · 407 in bank

   DRAG DROP - Match each feature to the DoS Protection Policy or the DoS Protection Profile. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Don't think it is. TIC can't work within network and endpoints. I think only NGFW and TIC need to change places. AEP is ok.

   Source: Adapted from community discussion — nolox

   

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCNSA practice, question 401. 407 questions available.