PCNSA Study Guide - Complete (Q’s & A’s)
Prevention Posture Assessment (PPA) - ✔️ The PPA is a set of
questionnaires that help uncover security risk prevention gaps across all
areas of network and security architecture. The PPA not only helps to
identify all security risks, it also provides detailed suggestions on how to
prevent the risks and close the gaps. The assessment, guided by an
experienced Palo Alto Networks sales engineer, helps determine the areas
of greatest risk where you should focus prevention activities. You can run
the PPA on firewalls and on Panorama.
Best Practice Assessment (BPA) Tool - ✔️ The BPA for next-
generation firewalls and Panorama evaluates a device's configuration by
measuring the adoption of capabilities, validating whether the policies
adhere to best practices, and providing recommendations and instructions
for how to remediate failed best practice checks.
The Security Policy Adoption Heatmap component filters the information
by device groups, serial numbers, zones, areas of architecture, and other
categories. The results include trending data, which shows the rate of
security improvement as you adopt new capabilities, fix gaps, and progress
toward a Zero-Trust network.
The BPA component performs more than 200 security checks on a firewall
or Panorama configuration and provides a pass/fail score for each check.
Each check is a best practice identified by Palo Alto Networks security
experts. If a check returns a failing score, the tool provides the justification
for the failing score and how to fix the issue.
In anti-malware, what does false positive mean? - ✔️ a false
positive incorrectly identifies a legitimate file or application as malware
In anti-malware, what does false negative mean? - ✔️ a false
negative incorrectly identifies malware as a legitimate file or application
Software as a Service (SaaS) - ✔️ Customers are provided access
to an application running on a cloud infrastructure. The application is
accessible from various client devices and interfaces, but the customer has
no knowledge of, and does not manage or control, the underlying cloud
infrastructure. The customer may have access to limited user-specific
, application settings, and security of the customer data is still the
responsibility of the customer.
Platform as a Service (PaaS) - ✔️ Customers can deploy
supported applications onto the providers cloud infrastructure, but the
customer has no knowledge of, and does not manage or control, the
underlying cloud infrastructure. The customer has control over the
deployed applications and limited configuration settings for the
application-hosting environment. The company owns the deployed
applications and data, it is therefore responsible for the security of those
applications and data.
Infrastructure as a Service (IaaS) - ✔️ Customers can provision
processing, storage, networks, and other computing resources and deploy
and run operating systems and applications. However, the customer has no
knowledge of, and does not manage or control, the underlying cloud
infrastructure. The customer has control over operating systems, storage,
and deployed applications, along with some networking components (for
example, host firewalls). The company owns deployed applications and
data, and it is therefore responsible for the security of those applications
and data.
Palo Alto Networks Security Operating Platform - ✔️ is a purpose
built, fully integrated cybersecurity approach that helps organizations get
control of their networks and protect critical assets
Which three options are key components of Security Operating Platform?
- ✔️ 1- Network Security
2- Advanced Endpoint Protection
3- Cloud Security
What are the essential functional requirements for an effective NGFW
include? - ✔️ 1- Application Identification - Accurately identify
applications regardless of port, protocol, evasive techniques or encryption.
Provide visibility of applications and granular policy-based control over
applications, including individual application functions.
2- User identification - Accurately identify users and subsequently use
identity information as an attribute for policy control.
Prevention Posture Assessment (PPA) - ✔️ The PPA is a set of
questionnaires that help uncover security risk prevention gaps across all
areas of network and security architecture. The PPA not only helps to
identify all security risks, it also provides detailed suggestions on how to
prevent the risks and close the gaps. The assessment, guided by an
experienced Palo Alto Networks sales engineer, helps determine the areas
of greatest risk where you should focus prevention activities. You can run
the PPA on firewalls and on Panorama.
Best Practice Assessment (BPA) Tool - ✔️ The BPA for next-
generation firewalls and Panorama evaluates a device's configuration by
measuring the adoption of capabilities, validating whether the policies
adhere to best practices, and providing recommendations and instructions
for how to remediate failed best practice checks.
The Security Policy Adoption Heatmap component filters the information
by device groups, serial numbers, zones, areas of architecture, and other
categories. The results include trending data, which shows the rate of
security improvement as you adopt new capabilities, fix gaps, and progress
toward a Zero-Trust network.
The BPA component performs more than 200 security checks on a firewall
or Panorama configuration and provides a pass/fail score for each check.
Each check is a best practice identified by Palo Alto Networks security
experts. If a check returns a failing score, the tool provides the justification
for the failing score and how to fix the issue.
In anti-malware, what does false positive mean? - ✔️ a false
positive incorrectly identifies a legitimate file or application as malware
In anti-malware, what does false negative mean? - ✔️ a false
negative incorrectly identifies malware as a legitimate file or application
Software as a Service (SaaS) - ✔️ Customers are provided access
to an application running on a cloud infrastructure. The application is
accessible from various client devices and interfaces, but the customer has
no knowledge of, and does not manage or control, the underlying cloud
infrastructure. The customer may have access to limited user-specific
, application settings, and security of the customer data is still the
responsibility of the customer.
Platform as a Service (PaaS) - ✔️ Customers can deploy
supported applications onto the providers cloud infrastructure, but the
customer has no knowledge of, and does not manage or control, the
underlying cloud infrastructure. The customer has control over the
deployed applications and limited configuration settings for the
application-hosting environment. The company owns the deployed
applications and data, it is therefore responsible for the security of those
applications and data.
Infrastructure as a Service (IaaS) - ✔️ Customers can provision
processing, storage, networks, and other computing resources and deploy
and run operating systems and applications. However, the customer has no
knowledge of, and does not manage or control, the underlying cloud
infrastructure. The customer has control over operating systems, storage,
and deployed applications, along with some networking components (for
example, host firewalls). The company owns deployed applications and
data, and it is therefore responsible for the security of those applications
and data.
Palo Alto Networks Security Operating Platform - ✔️ is a purpose
built, fully integrated cybersecurity approach that helps organizations get
control of their networks and protect critical assets
Which three options are key components of Security Operating Platform?
- ✔️ 1- Network Security
2- Advanced Endpoint Protection
3- Cloud Security
What are the essential functional requirements for an effective NGFW
include? - ✔️ 1- Application Identification - Accurately identify
applications regardless of port, protocol, evasive techniques or encryption.
Provide visibility of applications and granular policy-based control over
applications, including individual application functions.
2- User identification - Accurately identify users and subsequently use
identity information as an attribute for policy control.
