Latest Palo Alto Networks PCNSA Practice Test Questions, Palo Alto Networks Certified Network Security Administrator Exam Dumps [Q148-Q163]

Q148. Which two security profile types can be attached to a security policy? (Choose two.)

Q149. An administrator would like to see the traffic that matches the interzone-default rule in the traffic logs.
What is the correct process to enable this logging1?

Q150. Which rule type is appropriate for matching traffic occurring within a specified zone?

Q151. Which type of security rule will match traffic between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?

Q152. Your company occupies one floor in a single building. You have two Active Directory domain controllers on a single network. The firewall’s management plane is only slightly utilized.
Which User-ID agent is sufficient in your network?

Q153. Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

Q154. Given the image, which two options are true about the Security policy rules. (Choose two.)

Q155. Order the steps needed to create a new security zone with a Palo Alto Networks firewall.

Q156. Which file is used to save the running configuration with a Palo Alto Networks firewall?

Q157. How is an address object of type IP range correctly defined?

Q158. You receive notification about new malware that is being used to attack hosts. The malware exploits a software bug in common application.
Which Security Profile detects and blocks access to this threat after you update the firewall’s threat signature database?

Q159. Which three statement describe the operation of Security Policy rules or Security Profiles? (Choose three)

Q160. Which two App-ID applications will need to be allowed to use Facebook-chat? (Choose two.)

Q161. At which point in the App-ID update process can you determine if an existing policy rule is affected by an App-ID update?

Q162. A website is unexpectedly allowed due to miscategorization.
What are two ways to resolve this issue for a proper response? (Choose two.)

Q163. An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated? (Choose two.)