PCNSA Sample Practice Exam Questions 2024 Updated Verified [Q75-Q93] : IT certification exam materials : http://blog.dumpleader.com

QUESTION 75
Match the Palo Alto Networks Security Operating Platform architecture to its description.

QUESTION 76
What must first be created on the firewall for SAML authentication to be configured?

Server Policy

Server Profile

Server Location

Server Group

QUESTION 77
An administrator would like to use App-ID’s deny action for an application and would like that action updated with dynamic updates as new content becomes available.
Which security policy action causes this?

Reset server

Reset both

Deny

Drop

QUESTION 78
Which two statements are correct about App-ID content updates? (Choose two.)

Updated application content may change how security policy rules are enforced

After an application content update, new applications must be manually classified prior to use

Existing security policy rules are not affected by application content updates

After an application content update, new applications are automatically identified and classified

QUESTION 79
How often does WildFire release dynamic updates?

every 5 minutes

every 15 minutes

every 60 minutes

every 30 minutes

QUESTION 80
A network administrator creates an intrazone security policy rule on a NGFW. The source zones are set to IT.
Finance, and HR.
To which two types of traffic will the rule apply? (Choose two.)

Within zone HR

Within zone IT

Between zone IT and zone HR

Between zone IT and zone Finance

QUESTION 81
Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

The web session was unsuccessfully decrypted.

The traffic was denied by security profile.

The traffic was denied by URL filtering.

The web session was decrypted.

QUESTION 82
Based on the screenshot what is the purpose of the included groups?

They are only groups visible based on the firewall’s credentials.

They are used to map usernames to group names.

They contain only the users you allow to manage the firewall.

They are groups that are imported from RADIUS authentication servers.

QUESTION 83
In a security policy what is the quickest way to rest all policy rule hit counters to zero?

Use the CLI enter the command reset rules all

Highlight each rule and use the Reset Rule Hit Counter > Selected Rules.

use the Reset Rule Hit Counter > All Rules option.

Reboot the firewall.

QUESTION 84
An administrator wishes to follow best practices for logging traffic that traverses the firewall Which log setting is correct?

Disable all logging

Enable Log at Session End

Enable Log at Session Start

Enable Log at both Session Start and End

QUESTION 85
What are two differences between an implicit dependency and an explicit dependency in App-ID? (Choose two.)

An implicit dependency does not require the dependent application to be added in the security policy

An implicit dependency requires the dependent application to be added in the security policy

An explicit dependency does not require the dependent application to be added in the security policy

An explicit dependency requires the dependent application to be added in the security policy

QUESTION 86
An administrator needs to create a Security policy rule that matches DNS traffic within the LAN zone, and also needs to match DNS traffic within the DMZ zone.
The administrator does not want to allow traffic between the DMZ and LAN zones.
Which Security policy rule type should they use?

default

universal

intrazone

interzone

QUESTION 87
Based on the graphic, which statement accurately describes the output shown in the Server Monitoring panel?

The User-ID agent is connected to a domain controller labeled lab-client.

The host lab-client has been found by the User-ID agent.

The host lab-client has been found by a domain controller.

The User-ID agent is connected to the firewall labeled lab-client.

QUESTION 88
Which administrative management services can be configured to access a management interface?

HTTP, CLI, SNMP, HTTPS

HTTPS, SSH telnet SNMP

SSH: telnet HTTP, HTTPS

HTTPS, HTTP. CLI, API

QUESTION 89
Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

The web session was unsuccessfully decrypted.

The traffic was denied by security profile.

The traffic was denied by URL filtering.

The web session was decrypted.

QUESTION 90
An administrator is troubleshooting an issue with traffic that matches the interzone-default rule, which is set to default configuration.
What should the administrator do?

Change the logging action on the rule

Tune your Traffic Log filter to include the dates

Refresh the Traffic Log

Review the System Log

QUESTION 91
In which profile should you configure the DNS Security feature?

URL Filtering Profile

Anti-Spyware Profile

Zone Protection Profile

Antivirus Profile

QUESTION 92
What do dynamic user groups you to do?

create a QoS policy that provides auto-remediation for anomalous user behavior and malicious activity

create a policy that provides auto-sizing for anomalous user behavior and malicious activity

create a policy that provides auto-remediation for anomalous user behavior and malicious activity

create a dynamic list of firewall administrators

QUESTION 93
Which Palo Alto networks security operating platform service protects cloud-based application such as Dropbox and salesforce by monitoring permissions and shared and scanning files for Sensitive information?

Prisma SaaS

AutoFocus

Panorama

GlobalProtect