Cisco®
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
Microsoft
VMware
Avaya
SAP
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk®
All Vendors
  2. Home
  3. Exams
  4. Palo Alto Networks
  5. PCNSA

Free Palo Alto Networks PCNSA Exam Braindumps (page: 11)

Page 11 of 98
PDF with 420 Questions

Which two security profile types can be attached to a security policy? (Choose two.)

  1. antivirus
  2. DDoS protection
  3. threat
  4. vulnerability

Answer(s): A,D


Reference:

https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/policy/security-profiles



The CFO found a USB drive in the parking lot and decide to plug it into their corporate laptop. The USB drive had malware on it that loaded onto their computer and then contacted a known command and control (CnC) server, which ordered the infected machine to begin Exfiltrating data from the laptop.
Which security profile feature could have been used to prevent the communication with the CnC server?

  1. Create an anti-spyware profile and enable DNS Sinkhole
  2. Create an antivirus profile and enable DNS Sinkhole
  3. Create a URL filtering profile and block the DNS Sinkhole category
  4. Create a security policy and enable DNS Sinkhole

Answer(s): A


Reference:

https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-web-interface-help/objects/objects-security-profiles-anti-spyware-profile



Which user mapping method could be used to discover user IDs in an environment with multiple Windows domain controllers?

  1. Active Directory monitoring
  2. Windows session monitoring
  3. Windows client probing
  4. domain controller monitoring

Answer(s): D



Which three statements describe the operation of Security policy rules and Security Profiles? (Choose three.)

  1. Security policy rules are attached to Security Profiles.
  2. Security Profiles are attached to Security policy rules.
  3. Security Profiles should be used only on allowed traffic.
  4. Security policy rules inspect but do not block traffic.
  5. Security policy rules can block or allow traffic.

Answer(s): B,C,E






Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

PCNSA Exam Discussions & Posts