Question 51 · 407 in bank
Which objects would be useful for combining several services that are often defined together?
Show answer
Answer: B
PCNSAAssociatePalo Alto NetworksAll questions freePage 6 of 41
PCNSA practice questions 51–60
Palo Alto Networks Certified Network Security Administrator407 questions across 41 pages are complete and free, with no account or card.
Official study references
407 questions in this bank
Free access · progress saved on this device
Question 52 · 407 in bank
Select 2Given the screenshot, what two types of route is the administrator configuring? (Choose two.)
Show answer
Answer: BC
Explanation
It literally says it at the top of the screenshot "Virtual Router - Static Route - IPv4" and we all know that 0.0.0.0 represents a default route.
Source: Adapted from community discussion — Rowdy_47
Question 53 · 407 in bank
Which rule type is appropriate for matching traffic both within and between the source and destination zones?
Show answer
Answer: D
Explanation
Universal - By default, all the traffic destined between two zones, regardless of whether it is from the same zone or different zone. Universal rule types apply to all matching interzone and intrazone traffic in the specified source and destination zones.
Source: Adapted from community discussion — H3kerman
Question 54 · 407 in bank
Choose the option that correctly completes this statement. A Security Profile can block or allow traffic ____________.
Show answer
Answer: B
Explanation
'B' is correct answer according PCNSA Study Guide 2020, p.131 After a packet has been allowed by the Security policy, Security Profiles are used to scan packets for threats, vulnerabilities, viruses, spyware, malicious URLs, data exfiltration, and exploitation software.
Source: Adapted from community discussion — Angel123
Question 55 · 407 in bank
An administrator would like to override the default deny action for a given application, and instead would like to block the traffic and send the ICMP code `communication with the destination is administratively prohibited`. Which security policy action causes this?
Show answer
Answer: B
Explanation
Drop Silently drops the traffic; for an application, it overrides the default deny action. A TCP reset is not sent to the host/application. For Layer 3 interfaces, to optionally send an ICMP unreachable response to the client, set Action: Drop and enable the Send ICMP Unreachable check box. When enabled, the firewall sends the ICMP code for communication with the destination is administratively prohibited—ICMPv4: Type 3, Code 13; ICMPv6: Type 1, Code 1.
Source: Adapted from community discussion — H3kerman
References
Question 56 · 407 in bank
You receive notification about new malware that infects hosts through malicious files transferred by FTP. Which Security profile detects and protects your internal networks from this threat after you update your firewall's threat signature database?
Show answer
Answer: C
Explanation
Reference: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-profiles
Source: Adapted from community discussion — H3kerman
Question 57 · 407 in bank
Select 2An administrator wants to prevent access to media content websites that are risky. Which two URL categories should be combined in a custom URL category to accomplish this goal? (Choose two.)
Show answer
Answer: BD
Explanation
I'm going to go with B and D Reason being that I think media contect matches closer with option B known risk is not an option in the security focused URL catagory https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/content-inspection-features/url-filtering-multi-category.html https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/content-inspection-features/url-filtering-security-categories.html
Source: Adapted from community discussion — Rowdy_47
Question 58 · 407 in bank
Which dynamic update type includes updated anti-spyware signatures?
Show answer
Answer: B
Explanation
https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/education/pcnsa-study-guide.pdf Page 61: Applications and Threats: Includes new and updated application and threat signatures, including those that detect spyware and vulnerabilities.
Source: Adapted from community discussion — Grandslam
Question 59 · 407 in bank
An administrator would like to silently drop traffic from the internet to a ftp server. Which Security policy action should the administrator select?
Show answer
Answer: A
Question 60 · 407 in bank
Which object would an administrator create to block access to all high-risk applications?
Show answer
Answer: D
Explanation
Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClKECA0
References
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSA practice, question 51. 407 questions available.
About this question bank
Version 1.0.0. How we source questions