PCNSA Sample Test Study Questions With Correct
Answers
What |are |two |predefined |anti-spyware |profiles?
Default
Strict
Which |license |must |an |administrator |acquire |prior |to |downloading |Antivirus |updates |for |use |
with |the |firewall?
Threat |Prevention
Based |on |the |Security |policy |rules |shown, |SSH |will |be |allowed |on |which |port |for |inter-zone |
traffic?
Default |port
Which |two |interface |types |can |be |used |for |firewall |management?
Loopback
VLAN
Which |interface |type |uses |virtual |routers |and |routing |protocols?
Layer |3
What |are |three |types |of |address |objects |that |can |be |created?
IP |Netmask
IP |Range
FQDN
The |data |plane |provides |which |two |data |processing |features |of |the |firewall?
Signature |matching
Network |Processing
What |is |the |default |metric |value |of |static |routes
10
What |does |the |Save |Named |Configuration |Snapshot |option |do?
, Creates |a |candidate |configuration |snapshot |that |does |not |overwrite |the |default |snapshot |
(.snapshot.xml)
Which |interface |type |can |be |used |to |switch |traffic |between |multiple |interfaces |inside |the |
same |VLANs?
Layer |2 |interfaces
What |is |true |about |Panorama |managed |firewalls?
After |a |commit |on |a |local |firewall, |a |backup |of |its |running |config |is |sent |to |Panorama
Which |statement |is |true |about |the |App-ID |database?
Some |App-IDs |implicitly |allow |required |applications |without |the |need |to |explicitly |add |the |
parent |to |the |Security |policy
Which |interface |type |is |used |to |monitor |traffic |and |cannot |be |used |to |block |traffic?
Tap
Which |two |methods |can |be |used |to |manage |Palo |Alto |Networks |next-generation |firewalls?
XML |API
HTTP/HTTPS
If |the |NGFW |reboots |before |you |commit |your |changes, |how |can |you |revert |the |candidate |
configuration |to |the |current |snapshot |to |restore |changes |you |made |between |the |last |commit |
and |the |last |snapshot?
Revert |to |the |last |saved |configuration
Which |type |of |Security |policy |rule |would |match |traffic |that |flows |between |different |zones, |but
|would |not |match |traffic |that |flows |within |the |same |zones?
Interzone
Given |the |following |information |with |regards |to |traffic |flow |and |session |initiation |
requirements, |which |NAT |type |needs |to |be |configured?
Session |initiated |from |DMZ |to |Internet:Original |Packet: |Src |IP |10.10.10.10 |and |Dst |IP |
204.204.204.204
Translated |Packet: |Src |IP |20.20.20.20 |and |Dst |IP |204.204.204.204
Session |initiated |from |Internet |to |DMZ:
Answers
What |are |two |predefined |anti-spyware |profiles?
Default
Strict
Which |license |must |an |administrator |acquire |prior |to |downloading |Antivirus |updates |for |use |
with |the |firewall?
Threat |Prevention
Based |on |the |Security |policy |rules |shown, |SSH |will |be |allowed |on |which |port |for |inter-zone |
traffic?
Default |port
Which |two |interface |types |can |be |used |for |firewall |management?
Loopback
VLAN
Which |interface |type |uses |virtual |routers |and |routing |protocols?
Layer |3
What |are |three |types |of |address |objects |that |can |be |created?
IP |Netmask
IP |Range
FQDN
The |data |plane |provides |which |two |data |processing |features |of |the |firewall?
Signature |matching
Network |Processing
What |is |the |default |metric |value |of |static |routes
10
What |does |the |Save |Named |Configuration |Snapshot |option |do?
, Creates |a |candidate |configuration |snapshot |that |does |not |overwrite |the |default |snapshot |
(.snapshot.xml)
Which |interface |type |can |be |used |to |switch |traffic |between |multiple |interfaces |inside |the |
same |VLANs?
Layer |2 |interfaces
What |is |true |about |Panorama |managed |firewalls?
After |a |commit |on |a |local |firewall, |a |backup |of |its |running |config |is |sent |to |Panorama
Which |statement |is |true |about |the |App-ID |database?
Some |App-IDs |implicitly |allow |required |applications |without |the |need |to |explicitly |add |the |
parent |to |the |Security |policy
Which |interface |type |is |used |to |monitor |traffic |and |cannot |be |used |to |block |traffic?
Tap
Which |two |methods |can |be |used |to |manage |Palo |Alto |Networks |next-generation |firewalls?
XML |API
HTTP/HTTPS
If |the |NGFW |reboots |before |you |commit |your |changes, |how |can |you |revert |the |candidate |
configuration |to |the |current |snapshot |to |restore |changes |you |made |between |the |last |commit |
and |the |last |snapshot?
Revert |to |the |last |saved |configuration
Which |type |of |Security |policy |rule |would |match |traffic |that |flows |between |different |zones, |but
|would |not |match |traffic |that |flows |within |the |same |zones?
Interzone
Given |the |following |information |with |regards |to |traffic |flow |and |session |initiation |
requirements, |which |NAT |type |needs |to |be |configured?
Session |initiated |from |DMZ |to |Internet:Original |Packet: |Src |IP |10.10.10.10 |and |Dst |IP |
204.204.204.204
Translated |Packet: |Src |IP |20.20.20.20 |and |Dst |IP |204.204.204.204
Session |initiated |from |Internet |to |DMZ:
