Free Palo Alto Networks Certified Network Security Administrator Exam PCNSA Exam Practice Test

In which two Security Profiles can an action equal to the block IP feature be configured? (Choose two.)

• Antivirus
• URL Filtering
• Vulnerability Protection
• Anti-spyware

An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. The interzone-default was never changed from its default configuration.Why doesn't the administrator see the traffic?

• Traffic is being denied on the interzone-default policy.
• The Log Forwarding profile is not configured on the policy.
• The interzone-default policy is disabled by default
• Logging on the interzone-default policy is disabled

Which three types of entries can be excluded from an external dynamic list (EDL)? (Choose three.)

• IP addresses
• Domains
• User-ID
• URLs
• Applications

An administrator needs to add capability to perform real-time signature lookups to block or sinkhole all known malware domains.Which type of single unified engine will get this result?

• User-ID
• App-ID
• Security Processing Engine
• Content-ID

You need to allow users to access the office--suite application of their choice. How should you configure the firewall to allow access to any office-suite application?

• Create an Application Group and add Office 365, Evernote Google Docs and Libre Office
• Create an Application Group and add business-systems to it.
• Create an Application Filter and name it Office Programs, then filter it on the office programs subcategory.
• Create an Application Filter and name it Office Programs then filter on the business-systems category.

You receive notification about new malware that is being used to attack hosts The malware exploits a software bug in a common applicationWhich Security Profile detects and blocks access to this threat after you update the firewall's threat signature database?

• Data Filtering Profile applied to outbound Security policy rules
• Antivirus Profile applied to outbound Security policy rules
• Data Filtering Profile applied to inbound Security policy rules
• Vulnerability Profile applied to inbound Security policy rules

What are two differences between an implicit dependency and an explicit dependency in App-ID? (Choose two.)

• An implicit dependency does not require the dependent application to be added in the security policy
• An implicit dependency requires the dependent application to be added in the security policy
• An explicit dependency does not require the dependent application to be added in the security policy
• An explicit dependency requires the dependent application to be added in the security policy

Which dynamic update type includes updated anti-spyware signatures?

• Applications and Threats
• GlobalProtect Data File
• Antivirus
• PAN-DB

An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. The interzone-default was never changed from its default configuration.Why doesn't the administrator see the traffic?

• Logging on the interzone-default policy is disabled.
• Traffic is being denied on the interzone-default policy.
• The Log Forwarding profile is not configured on the policy.
• The interzone-default policy is disabled by default.

Which situation is recorded as a system log?

• An attempt to access a spoofed website has been blocked.
• A connection with an authentication server has been dropped.
• A file that has been analyzed is potentially dangerous for the system.
• A new asset has been discovered on the network.