Given the topology, which interface type should you configure for firewall interface E1/1?
Answer(s): C
Which solution is a viable option to capture user identification when Active Directory is not in use?
Answer(s): A
https://docs.paloaltonetworks.com/cloud-identity/cloud-identity-engine-getting-started/choose-directory-type/configure-an-on-premises-directory/install- the-cloud-identity-agent
What allows a security administrator to preview the Security policy rules that match new application signatures?
Answer(s): D
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/app-id/manage-new-app-ids-introduced-in-content-releases/review-new-app-id-impact-on-existing-policy-rules.html
If using group mapping with Active Directory Universal Groups, what must you do when configuring the User ID?
https://docs.paloaltonetworks.com/best-practices/10-0/user-id-best-practices/user-id-best-practices/user-id-best-practices-for-group-mapping.html
An administrator needs to add capability to perform real time signature lookups to block or sinkhole all known malware domains.Which type of single, unified engine will get this result?
Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the PCNSA content, but please register or login to continue.