Free PCNSA Exam braindumps download (PCNSA exam dumps Free)

QUESTION: 156

Which option is part of the content inspection process?

Packet forwarding process
IPsec tunnel encryption
SSL Proxy re-encrypt
Packet egress process

Answer(s): C

Reference:

http://live.paloaltonetworks.com//t5/image/serverpage/image-id/12862i950F549C7D4E6309

QUESTION: 157

How does an administrator schedule an Applications and Threats dynamic update while delaying installation of the update for a certain amount of time?

Disable automatic updates during weekdays
Automatically ג€download and installג€ but with the ג€disable new applicationsג€ option used
Automatically ג€download onlyג€ and then install Applications and Threats later, after the administrator approves the update
Configure the option for ג€Thresholdג€

Answer(s): D

Reference:

https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/threat-prevention/best-practices-for-application-and-threat-content-updates#

Show Answer Next Question

QUESTION: 158

What must be considered with regards to content updates deployed from Panorama?

Content update schedulers need to be configured separately per device group.
Panorama can only install up to five content versions of the same type for potential rollback scenarios.
A PAN-OS upgrade resets all scheduler configurations for content updates.
Panorama can only download one content update at a time for content updates of the same type.

Answer(s): D

Reference:

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-licenses-and-updates/deploy-updates-to-firewalls-log-collectors-and- wildfire-appliances-using-panorama/schedule-a-content-update-using-panorama.html

Show Answer Next Question

QUESTION: 159

During the packet flow process, which two processes are performed in application identification? (Choose two.)

pattern based application identification
application override policy match
session application identified
application changed from content inspection

Answer(s): A,B

Reference:

http://live.paloaltonetworks.com//t5/image/serverpage/image-id/12862i950F549C7D4E6309

Show Answer Next Question

QUESTION: 160

Refer to the exhibit.

A web server in the DMZ is being mapped to a public address through DNAT.

Which Security policy rule will allow traffic to flow to the web server?

Untrust (any) to DMZ (10.1.1.100), web browsing - Allow
Untrust (any) to Untrust (1.1.1.100), web browsing - Allow
Untrust (any) to Untrust (10.1.1.100), web browsing - Allow
Untrust (any) to DMZ (1.1.1.100), web browsing - Allow

Answer(s): D

Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/nat/nat-configuration-examples/destination-nat-exampleone-to-one-mapping

Show Answer Next Question

Free PCNSA Exam Braindumps Palo Alto Networks Certified Network Security Administrator Questions 156–160 (page: 33)

QUESTION: 156

Reference:

QUESTION: 157

Reference:

QUESTION: 158

Reference:

QUESTION: 159

Reference:

QUESTION: 160

Reference:

Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 156–160 (page: 33)