Palo Alto Networks PCNSA Quiz 3 Topic 7 Questions 11-15

Question: 1

All users from the internal zone must be allowed only Telnet access to a server in the DMZ zone. Complete the two empty fields in the Security Policy rules that permits only this type of access.

q1_PCNSA

Choose two.

AService = 'any'

BApplication = 'Telnet'

CService - 'application-default'

DApplication = 'any'

Show Answer

Question: 2

Which statements is true regarding a Heatmap report?

AWhen guided by authorized sales engineer, it helps determine te areas of greatest security risk.

BIt provides a percentage of adoption for each assessment area.

CIt runs only on firewall.

DIt provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture.

Show Answer

Question: 3

In a security policy what I the quickest way to rest all policy rule hit counters to zero?

AUse the CLI enter the command reset rules all

BHighlight each rule and use the Reset Rule Hit Counter > Selected Rules.

Cuse the Reset Rule Hit Counter > All Rules option.

DReboot the firewall.

Show Answer

Question: 4

You have been tasked to configure access to a new web server located in the DMZ

Based on the diagram what configuration changes are required in the NGFW virtual router to route traffic from the 10 1 1 0/24 network to 192 168 1 0/24?

q4_PCNSA

AAdd a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 192.168 1.10

BAdd a route with the destination of 192 168 1 0/24 using interface Eth 1/2 with a next-hop of 172.16.1.2

CAdd a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 172.16.1.2

DAdd a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 192.168.1.254

Show Answer

Question: 5

Complete the statement. A security profile can block or allow traffic.

Aon unknown-tcp or unknown-udp traffic

Bafter it is evaluated by a security policy that allows traffic

Cbefore it is evaluated by a security policy

Dafter it is evaluated by a security policy that allows or blocks traffic

Show Answer

Palo Alto Networks PCNSA Quiz:3 Topic:7 Questions:11-15