Free PCNSA Exam braindumps download (PCNSA exam dumps Free)

QUESTION: 136

Which license is required to use the Palo Alto Networks built-in IP address EDLs?

DNS Security
Threat Prevention
WildFire
SD-Wan

Answer(s): B

Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/built-in-edls.html#:~:text=With%20an%20active%20Threat%20Prevention,to%20protect%20against%20malicious%20hosts

Show Answer Next Question

QUESTION: 137

Which statement is true about Panorama managed devices?

Panorama automatically removes local configuration locks after a commit from Panorama.
Local configuration locks prohibit Security policy changes for a Panorama managed device.
Security policy rules configured on local firewalls always take precedence.
Local configuration locks can be manually unlocked from Panorama.

Answer(s): A

Reference:

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/administer-panorama/manage-locks-for-restricting-configuration-changes.html

Show Answer Next Question

QUESTION: 138

A Security Profile can block or allow traffic at which point?

on either the data plane or the management plane
after it is matched to a Security policy rule that allows or blocks traffic
after it is matched to a Security policy rule that allows traffic
before it is matched to a Security policy rule

Answer(s): C

Show Answer Next Question

QUESTION: 139

DRAG DROP (Drag and Drop is not supported)
Place the following steps in the packet processing order of operations from first to last.
Select and Place: