Free PCNSA Exam Braindumps (page: 10)

Page 10 of 98

Which two security profile types can be attached to a security policy? (Choose two.)

  1. antivirus
  2. DDoS protection
  3. threat
  4. vulnerability

Answer(s): A,D


Reference:

https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/policy/security-profiles



The CFO found a USB drive in the parking lot and decide to plug it into their corporate laptop. The USB drive had malware on it that loaded onto their computer and then contacted a known command and control (CnC) server, which ordered the infected machine to begin Exfiltrating data from the laptop.
Which security profile feature could have been used to prevent the communication with the CnC server?

  1. Create an anti-spyware profile and enable DNS Sinkhole
  2. Create an antivirus profile and enable DNS Sinkhole
  3. Create a URL filtering profile and block the DNS Sinkhole category
  4. Create a security policy and enable DNS Sinkhole

Answer(s): A


Reference:

https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-web-interface-help/objects/objects-security-profiles-anti-spyware-profile



Which user mapping method could be used to discover user IDs in an environment with multiple Windows domain controllers?

  1. Active Directory monitoring
  2. Windows session monitoring
  3. Windows client probing
  4. domain controller monitoring

Answer(s): D



Which three statements describe the operation of Security policy rules and Security Profiles? (Choose three.)

  1. Security policy rules are attached to Security Profiles.
  2. Security Profiles are attached to Security policy rules.
  3. Security Profiles should be used only on allowed traffic.
  4. Security policy rules inspect but do not block traffic.
  5. Security policy rules can block or allow traffic.

Answer(s): B,C,E



Page 10 of 98



Post your Comments and Discuss Palo Alto Networks PCNSA exam with other Community members:

Frage commented on June 29, 2024
As an individual I sometimes reflect on the way we do things. And this is one of them. We use exam dumps to pass our exams... the smart way. :-)
Australia
upvote

TGreen commented on June 11, 2024
anyone use these dumps on a recent 2024 exam?
UNITED STATES
upvote

Jonathan commented on April 10, 2024
Question 207 answer is incorrect. In the security policy rule, source IP should be IOT/Guest Zone and Trust Zone, not the subnet in the DMZ zone. (Answer B)
SINGAPORE
upvote

Abdullah commented on September 29, 2023
good morning
Anonymous
upvote

ethiopia commented on August 02, 2023
seems good..
ETHIOPIA
upvote

A\MAM commented on June 27, 2023
q-6 ans-b correct. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-cli-quick-start/use-the-cli/commit-configuration-changes
UNITED STATES
upvote

Tanveer Ansari commented on October 10, 2023
Good content and very helpful exam dumps
Anonymous
upvote

Fa commented on September 02, 2023
Good morning
Anonymous
upvote

ethiopia commented on August 02, 2023
seems good..
ETHIOPIA
upvote

walyra commented on July 09, 2023
Q-4 ans Q-4 ans (A) correct
Anonymous
upvote

A\MAM commented on June 27, 2023
Q-6 Ans-B correct. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-cli-quick-start/use-the-cli/commit-configuration-changes
UNITED STATES
upvote

Dequarius commented on March 05, 2023
Good content and very helpful exam dumps. I stuided for 4 days, made sure to get a 85+ passing mark using the Xengien App free software. Then I booked my certification exam. Passed it on the first go.
AUSTRALIA
upvote

Robyn commented on February 03, 2023
Very easy purchase process. I have not got a chance to install the Test Engine or the Xengine App but the PDF looks good enough for me.
UNITED KINGDOM
upvote

Boyaan commented on November 01, 2022
I am happy to tell you that I passed my exam today with very good score.
TURKEY
upvote

Lenny commented on October 19, 2022
Many thanks to you and your product. It was the main factor in passing my exam. Very greatful to you guys.
AUSTRALIA
upvote

Soumya commented on August 16, 2022
I got 890/1000 in my exam today.
INDIA
upvote

Mr. ExamTaker commented on May 30, 2021
I love the payment process. They do not ask for any name or address. I am a sucker for privacy.
UNITED KINGDOM
upvote