PCNSA Paloalto-Networks Exam Questions and Free Practice Test

Question 7

Which User-ID agent would be appropriate in a network with multiple WAN links, limited network bandwidth, and limited firewall management plane resources?

A. Windows-based agent deployed on the internal network

B. PAN-OS integrated agent deployed on the internal network

C. Citrix terminal server deployed on the internal network

D. Windows-based agent deployed on each of the WAN Links

Correct Answer:A

Question 8

Which option shows the attributes that are selectable when setting up application filters?

A. Category, Subcategory, Technology, and Characteristic

B. Category, Subcategory, Technology, Risk, and Characteristic

C. Name, Category, Technology, Risk, and Characteristic

D. Category, Subcategory, Risk, Standard Ports, and Technology

Correct Answer:B

Question 9

Complete the statement. A security profile can block or allow traffic.

A. on unknown-tcp or unknown-udp traffic

B. after it is evaluated by a security policy that allows traffic

C. before it is evaluated by a security policy

D. after it is evaluated by a security policy that allows or blocks traffic

Correct Answer:D

Question 10

Which statement is true regarding a Prevention Posture Assessment?

A. The Security Policy Adoption Heatmap component filters the information by device groups, serial numbers, zones, areas of architecture, and other categories

B. It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

C. It provides a percentage of adoption for each assessment area

D. It performs over 200 security checks on Panorama/firewall for the assessment

Correct Answer:B

Question 11

What are three differences between security policies and security profiles? (Choose three.)

A. Security policies are attached to security profiles

B. Security profiles are attached to security policies

C. Security profiles should only be used on allowed traffic

D. Security profiles are used to block traffic by themselves

E. Security policies can block or allow traffic

Correct Answer:BCE

Question 12

In which stage of the Cyber-Attack Lifecycle would the attacker inject a PDF file within an email?

A. Weaponization

B. Reconnaissance

C. Installation

D. Command and Control

E. Exploitation

Correct Answer:A

START PCNSA EXAM