PCNSA 2 Exams 100% Correct!!

The CFO found a malware infected USB drive in the parking lot, when inserted infected their corporate laptop. The malware contacted a known command- and control server, which caused the infected laptop to begin exfiltrating corporate data. Which security profile feature could have been used to prevent the communication with the command-and-control server? - ANSWERCreate a Data Filtering Profiles and enable its DNS Sinkhole Feature. For the firewall to use Active Directory to authenticate users, which Server Profile is required in the Authentication Profile? - ANSWERLDAP Your company occupies one floor in a single building. You have two Active Directory domain controllers on a single network. The firewall's management plane is only slightly utilized. Which User-ID agent is sufficient in your networks? - ANSWERWindows-based agent deployed on each domain controller. Which type of administrative role must you assign to as firewall administrator account, if the account must include a custom set of firewall permissions? - ANSWERRole-Based Which statement is true regarding a Heatmap report? - ANSWERIt provides a percentage of adoption for each assessment area. Access to which feature requires the PAN-OS Filtering license? - ANSWERPAN-DB database Which action results in the firewall blocking network traffic without notifying the sender? - ANSWERDeny Which type of security policy rule will match traffic that flows between the Outside z