PCNSA 2 ALREADY PASSED
Which Palo Alto Networks firewall security platform provides network security for mobile endpoints by
inspecting traffic deployment as internet gateways? - ✔✔Global Protect
Which statement is true regarding a Prevention Posture Assessment? - ✔✔It provides a set of
questionnaires that help uncover security risk prevention gaps across all areas of network and security
architecture.
Which fiver Zero Trust concepts does a Palo Alto Networks firewall apply to achieve an integrated
approach to prevent threats? - ✔✔User identification
Vulnerability protection
Antivirus
Application Identification
Anti-spyware
A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future
Public Cloud environments. All other required connections have already been enabled between the
USERS- and the OUTSIDE-zone. What configuration-changes should the Firewall-admin make? - ✔✔
Create a security-rule that allows traffic from zone USERS to OUTSIDE to allow traffic from any source IP-
address to any destination IP-address for application SSH.
What must you configure to enable the firewall to access multiple Authentication Profile's to
authenticate a non-local account? - ✔✔Authentication Sequence
Which URL Filtering Profile action does not generate a log entry when a user attempts to access a URL? -
✔✔Allow
Which Palo Alto Networks firewall security platform provides network security for mobile endpoints by
inspecting traffic deployment as internet gateways? - ✔✔Global Protect
Which statement is true regarding a Prevention Posture Assessment? - ✔✔It provides a set of
questionnaires that help uncover security risk prevention gaps across all areas of network and security
architecture.
Which fiver Zero Trust concepts does a Palo Alto Networks firewall apply to achieve an integrated
approach to prevent threats? - ✔✔User identification
Vulnerability protection
Antivirus
Application Identification
Anti-spyware
A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future
Public Cloud environments. All other required connections have already been enabled between the
USERS- and the OUTSIDE-zone. What configuration-changes should the Firewall-admin make? - ✔✔
Create a security-rule that allows traffic from zone USERS to OUTSIDE to allow traffic from any source IP-
address to any destination IP-address for application SSH.
What must you configure to enable the firewall to access multiple Authentication Profile's to
authenticate a non-local account? - ✔✔Authentication Sequence
Which URL Filtering Profile action does not generate a log entry when a user attempts to access a URL? -
✔✔Allow
