Free PCNSA Exam Braindumps (page: 6)

Page 6 of 98

Which interface does not require a MAC or IP address?

  1. Virtual Wire
  2. Layer3
  3. Layer2
  4. Loopback

Answer(s): A



A company moved its old port-based firewall to a new Palo Alto Networks NGFW 60 days ago. Which utility should the company use to identify out-of-date or unused rules on the firewall?

  1. Rule Usage Filter > No App Specified
  2. Rule Usage Filter >Hit Count > Unused in 30 days
  3. Rule Usage Filter > Unused Apps
  4. Rule Usage Filter > Hit Count > Unused in 90 days

Answer(s): D



DRAG DROP (Drag and Drop is not supported)
Order the steps needed to create a new security zone with a Palo Alto Networks firewall.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



What are two differences between an implicit dependency and an explicit dependency in App-ID? (Choose two.)

  1. An implicit dependency does not require the dependent application to be added in the security policy
  2. An implicit dependency requires the dependent application to be added in the security policy
  3. An explicit dependency does not require the dependent application to be added in the security policy
  4. An explicit dependency requires the dependent application to be added in the security policy

Answer(s): A,D






Post your Comments and Discuss Palo Alto Networks PCNSA exam with other Community members:

PCNSA Exam Discussions & Posts