QUESTION: 13

Which statement is true regarding a Best Practice Assessment?

The BPA tool can be run only on firewalls
It provides a percentage of adoption for each assessment area
The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus prevention activities
It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

Answer(s): B

Reference:

https://docs.paloaltonetworks.com/best-practices/8-1/data-center-best-practices/data-center-best-practice-security-policy/use-palo-alto-networks- assessment-and-review-tools

Reveal Solution Next Question

QUESTION: 14

Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

intrazone-default
Deny Google
allowed-security services
interzone-default

Answer(s): D

Reveal Solution Next Question

QUESTION: 15

Choose the option that correctly completes this statement. A Security Profile can block or allow traffic ____________.

on either the data place or the management plane.
after it is matched by a security policy rule that allows traffic.
before it is matched to a Security policy rule.
after it is matched by a security policy rule that allows or blocks traffic.

Answer(s): D

Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-policy.html

Reveal Solution Next Question

QUESTION: 16

When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?

Translation Type
Interface
Address Type
IP Address

Answer(s): A

Reveal Solution Next Question

Free PCNSA Exam Braindumps (page: 5)

QUESTION: 13

Reference:

QUESTION: 14

QUESTION: 15

Reference:

QUESTION: 16

PCNSA Exam Discussions & Posts