PCNSA
Study online at https://quizlet.com/_hraaz9
1. Which statement is true about a URL Filtering Profile's continue password?
- There is a password per session.
- There is a password per website.
- There is a single, per-firewall password.
- There is a password per firewall administrator account.: There is a single, per-firewall
password.
2. Which three MGT port configuration settings must be configured before you
can remotely access the web interface? (Choose three.)
- netmask
- hostname
- DNS Server
- IP Address
- Default gateway: - Netmask
- IP Address
- Default gateway
3. Which two statements are true about sessions on the firewall? (Choose two.)
- Return traffic is allowed.
- The only session information tracked in the session logs are the five tuples.
- The firewall tries to match network packets to an existing session ID.
- Sessions always are matched to a Security policy rule: - Return traffic is allowed.
- The firewall tries to match network packets to an existing session ID.
4. The network packet broker feature is supported by which four Palo Alto
Networks firewall series? (Choose four.)
- PA-3000
- PA-3200
, PCNSA
Study online at https://quizlet.com/_hraaz9
- PA-5000
- PA-5200
- PA-7000
- VM-Series: - PA-3200
- PA-5200
- PA-7000
- VM-Series
5. Which statement is true about firewall HTTP header insertion?
- Header insertion is only applied to ingress packets.
- Header insertion is only applied to egress packets.
- Header insertion is configured as part of custom URL categories.
- Header insertion is configured as part of a Data Filtering Profile: - Header insertion
is only applied to egress packets.
6. What is the maximum number of WildFire appliances that can be grouped
into a WildFire appliance cluster?
- 12
- 20
- 24
- 32: - 20
7. Which user mapping method is recommended for a highly mobile user base?
- GlobalProtect
- Client Probing
- Server Monitoring
- Session Monitoring: - GlobalProtect
8. Which three objects can be sent to WildFire for analysis? (Choose three.)
- email attachments
- MGT interface traffic
- URL links found in email
, PCNSA
Study online at https://quizlet.com/_hraaz9
- known files and URL links
- files traversing the firewall: - Email attachments
- URL links found in email
- files traversing the firewall
9. Which statement describes a function provided by an Interface Management
Profile?
- It determines which administrators can manage which interfaces.
- It determines which external services are accessible by the firewall.
- It determines the NetFlow and LLDP interface management settings.
- It determines which firewall services are accessible from external devices.: - It
determines which firewall services are accessible from external devices.
10. Which interface type does NOT require any configuration changes to adja-
cent network devices?
- Tap
- Layer 2
- Layer 3
- Virtual Wire: - Virtual Wire
11. Which action in a File Blocking Security Profile results in the user being
prompted to verify a file transfer?
- Alert
- Allow
- Block
- Continue: - Continue
12. What is the result of performing a firewall Commit operation?
- The saved configuration becomes the loaded configuration.
- The candidate configuration becomes the saved configuration.
- The loaded configuration becomes the candidate configuration.
Study online at https://quizlet.com/_hraaz9
1. Which statement is true about a URL Filtering Profile's continue password?
- There is a password per session.
- There is a password per website.
- There is a single, per-firewall password.
- There is a password per firewall administrator account.: There is a single, per-firewall
password.
2. Which three MGT port configuration settings must be configured before you
can remotely access the web interface? (Choose three.)
- netmask
- hostname
- DNS Server
- IP Address
- Default gateway: - Netmask
- IP Address
- Default gateway
3. Which two statements are true about sessions on the firewall? (Choose two.)
- Return traffic is allowed.
- The only session information tracked in the session logs are the five tuples.
- The firewall tries to match network packets to an existing session ID.
- Sessions always are matched to a Security policy rule: - Return traffic is allowed.
- The firewall tries to match network packets to an existing session ID.
4. The network packet broker feature is supported by which four Palo Alto
Networks firewall series? (Choose four.)
- PA-3000
- PA-3200
, PCNSA
Study online at https://quizlet.com/_hraaz9
- PA-5000
- PA-5200
- PA-7000
- VM-Series: - PA-3200
- PA-5200
- PA-7000
- VM-Series
5. Which statement is true about firewall HTTP header insertion?
- Header insertion is only applied to ingress packets.
- Header insertion is only applied to egress packets.
- Header insertion is configured as part of custom URL categories.
- Header insertion is configured as part of a Data Filtering Profile: - Header insertion
is only applied to egress packets.
6. What is the maximum number of WildFire appliances that can be grouped
into a WildFire appliance cluster?
- 12
- 20
- 24
- 32: - 20
7. Which user mapping method is recommended for a highly mobile user base?
- GlobalProtect
- Client Probing
- Server Monitoring
- Session Monitoring: - GlobalProtect
8. Which three objects can be sent to WildFire for analysis? (Choose three.)
- email attachments
- MGT interface traffic
- URL links found in email
, PCNSA
Study online at https://quizlet.com/_hraaz9
- known files and URL links
- files traversing the firewall: - Email attachments
- URL links found in email
- files traversing the firewall
9. Which statement describes a function provided by an Interface Management
Profile?
- It determines which administrators can manage which interfaces.
- It determines which external services are accessible by the firewall.
- It determines the NetFlow and LLDP interface management settings.
- It determines which firewall services are accessible from external devices.: - It
determines which firewall services are accessible from external devices.
10. Which interface type does NOT require any configuration changes to adja-
cent network devices?
- Tap
- Layer 2
- Layer 3
- Virtual Wire: - Virtual Wire
11. Which action in a File Blocking Security Profile results in the user being
prompted to verify a file transfer?
- Alert
- Allow
- Block
- Continue: - Continue
12. What is the result of performing a firewall Commit operation?
- The saved configuration becomes the loaded configuration.
- The candidate configuration becomes the saved configuration.
- The loaded configuration becomes the candidate configuration.
