Palo Alto Networks PCNSA Certification(100% Correct!)

Question: 2 Which two statements are true for the DNS security service introduced in PAN-OS version 10.0? - ANSWERA. It functions like PAN-DB and requires activation through the app portal. B. It removes the 100K limit for DNS entries for the downloaded DNS updates. C. IT eliminates the need for dynamic DNS updates. D. IT is automatically enabled and configured. Question: 3 Which three statement describe the operation of Security Policy rules or Security Profiles? (Choose three) - ANSWERA. Security policy rules inspect but do not block traffic. B. Security Profile should be used only on allowed traffic. C. Security Profile are attached to security policy rules. D. Security Policy rules are attached to Security Profiles. E. Security Policy rules can block or allow traffic. Question: 5 What is an advantage for using application tags? - ANSWERA. They are helpful during the creation of new zones B. They help with the design of IP address allocations in DHCP. C. They help content updates automate policy updates D. They help with the creation of interfaces Question: 6 Which operations are allowed when working with App-ID application tags? - Question: 1 Starting with PAN_OS version 9.1 which new type of object is supported for use within