Free PCNSA Exam braindumps download (PCNSA exam dumps Free)

QUESTION: 171

What action will inform end users when their access to Internet content is being restricted?

Create a custom ג€URL Categoryג€ object with notifications enabled.
Publish monitoring data for Security policy deny logs.
Ensure that the ג€site accessג€ setting for all URL sites is set to ג€alertג€.
Enable ג€Response Pagesג€ on the interface providing Internet access.

Answer(s): D

Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/device/device-response-pages.html

Show Answer Next Question

QUESTION: 172

What is a recommended consideration when deploying content updates to the firewall from Panorama?

Before deploying content updates, always check content release version compatibility.
Content updates for firewall A/P HA pairs can only be pushed to the active firewall.
Content updates for firewall A/A HA pairs need a defined master device.
After deploying content updates, perform a commit and push to Panorama.

Answer(s): D

Reference:

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-licenses-and-updates/deploy-updates-to-firewalls-log-collectors-and- wildfire-appliances-using-panorama/schedule-a-content-update-using-panorama.html

Show Answer Next Question

QUESTION: 173

Which information is included in device state other than the local configuration?

uncommitted changes
audit logs to provide information of administrative account changes
system logs to provide information of PAN-OS changes
device group and template settings pushed from Panorama

Answer(s): D

Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device-setup-operations.html

Show Answer Next Question

QUESTION: 174

Based on the graphic, what is the purpose of the SSL/TLS Service profile configuration option?

It defines the SSL/TLS encryption strength used to protect the management interface.
It defines the CA certificate used to verify the client's browser.
It defines the certificate to send to the client's browser from the management interface.
It defines the firewall's global SSL/TLS timeout values.

Answer(s): C

Reference:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFGCA0

Show Answer Next Question

QUESTION: 175

An administrator is troubleshooting an issue with traffic that matches the intrazone-default rule, which is set to default configuration.
What should the administrator do?

change the logging action on the rule
review the System Log
refresh the Traffic Log
tune your Traffic Log filter to include the dates

Answer(s): A

Show Answer Next Question

Free PCNSA Exam Braindumps Palo Alto Networks Certified Network Security Administrator Questions 171–175 (page: 36)

QUESTION: 171

Reference:

QUESTION: 172

Reference:

QUESTION: 173

Reference:

QUESTION: 174

Reference:

QUESTION: 175

Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 171–175 (page: 36)