PrepTorrent

http://www.preptorrent.com/
Excellent company engaging Providing Valid exam torrent and preparation materials for qualification
exams
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

Exam : PCNSA

Title : Palo Alto Networks Certified

Vendor : Palo Alto Networks

Version : DEMO

1 from Preptorrent.com.
Get Latest & Valid PCNSA Exam's Question and Answers 1
http://www.preptorrent.com/pcnsa-latest-valid.html
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

NO.1 Which type of administrative role must you assign to a firewall administrator account, if the
account must include a custom set of firewall permissions?
A. SAML
B. Role-based
C. Dynamic
D. Multi-Factor Authentication
Answer: B

NO.2 An administrator receives a global notification for a new malware that infects hosts. The
infection will result in the infected host attempting to contact a command-and-control (C2) server.
Which two security profile components will detect and prevent this threat after the firewall's
signature database has been updated?
(Choose two.)
A. antivirus profile applied to outbound security policies
B. URL filtering profile applied to outbound security policies
C. vulnerability protection profile applied to outbound security policies
D. anti-spyware profile applied to outbound security policies
Answer: B,D

NO.3 Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate
malicious code against a targeted machine.

A. Exploitation
B. Installation
C. Reconnaissance
D. Act on Objective
Answer: A

NO.4 Which operations are allowed when working with App-ID application tags?
A. Predefined tags may be augmented by custom tags.
B. Predefined tags may be deleted.
C. Predefined tags may be modified.
D. Predefined tags may be updated by WildFire dynamic updates.

2 from Preptorrent.com.
Get Latest & Valid PCNSA Exam's Question and Answers 2
http://www.preptorrent.com/pcnsa-latest-valid.html
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

Answer: A

NO.5 Which two features can be used to tag a user name so that it is included in a dynamic user
group? (Choose two)
A. User-ID Windows-based agent
B. XML API
C. log forwarding auto-tagging
D. GlobalProtect agent
Answer: A,D

NO.6 In the example security policy shown, which two websites fcked? (Choose two.)

A. Amazon
B. LinkedIn
C. Facebook
D. YouTube
Answer: B,C

NO.7 A security administrator has configured App-ID updates to be automatically downloaded and
installed. The company is currently using an application identified by App-ID as SuperApp_base.
On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat
and SuperApp_download, which will be deployed in 30 days.
Based on the information, how is the SuperApp traffic affected after the 30 days have passed?
A. No impact because the apps were automatically downloaded and installed
B. All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer
matches the SuperApp-base application
C. All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until
the security administrator approves the applications
D. No impact because the firewall automatically adds the rules to the App-ID interface
Answer: B
Explanation
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/manage-new-app-ids-
introduced-in-content-r

NO.8 Which two statements are true for the DNS security service introduced in PAN-OS version 9.0?
A. IT eliminates the need for dynamic DNS updates.
B. IT is automatically enabled and configured.
C. It functions like PAN-DB and requires activation through the app portal.
D. It removes the 100K limit for DNS entries for the downloaded DNS updates.
Answer: C,D

3 from Preptorrent.com.
Get Latest & Valid PCNSA Exam's Question and Answers 3
http://www.preptorrent.com/pcnsa-latest-valid.html
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

NO.9 An internal host wants to connect to servers of the internet through using source NAT.
Which policy is required to enable source NAT on the firewall?
A. NAT policy with source zone and destination zone specified
B. NAT policy with no source of destination zone selected
C. pre-NAT policy with external source and any destination address
D. post-NAT policy with external source and any destination address
Answer: A

NO.10 How often does WildFire release dynamic updates?

NO.11 Starting with PAN_OS version 9.1 which new type of object is supported for use within the
user field of a security policy rule?
A. remote username
B. dynamic user group
C. local username
D. static user group
Answer: D

NO.12 Which two security profile types can be attached to a security policy? (Choose two.)
A. vulnerability
B. DDoS protection
C. threat
D. antivirus
Answer: A,D

4 from Preptorrent.com.
Get Latest & Valid PCNSA Exam's Question and Answers 4
http://www.preptorrent.com/pcnsa-latest-valid.html