Unique Top-selling PCNSA Exams – New 2022 Palo Alto Networks Pratice Exam [Q86-Q109]

NO.86 Which path in PAN-OS 9.0 displays the list of port-based security policy rules?

NO.87 Based on the security policy rules shown, ssh will be allowed on which port?

NO.88 Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.

NO.89 You have been tasked to configure access to a new web server located in the DMZ Based on the diagram what configuration changes are required in the NGFW virtual router to route traffic from the 10 1 1 0/24 network to 192 168 1 0/24?

NO.90 Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?

NO.91 Based on the security policy rules shown, ssh will be allowed on which port?

NO.92 An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server.
Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated? (Choose two.)

NO.93 What is the minimum timeframe that can be set on the firewall to check for new WildFire signatures?

NO.94 What in the minimum frequency for which you can configure the firewall too check for new wildfire antivirus signatures?

NO.95 Which license is required to use the Palo Alto Networks built-in IP address EDLs?

NO.96 A company moved its old port-based firewall to a new Palo Alto Networks NGFW 60 days ago. Which utility should the company use to identify out-of-date or unused rules on the firewall?

NO.97 Actions can be set for which two items in a URL filtering security profile? (Choose two.)

NO.98 Arrange the correct order that the URL classifications are processed within the system.

NO.99 Which two statements are true for the DNS security service introduced in PAN-OS version 10.0?

NO.100 Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)

NO.101 Your company requires positive username attribution of every IP address used by wireless devices to support a new compliance requirement. You must collect IP -to-user mappings as soon as possible with minimal downtime and minimal configuration changes to the wireless devices themselves. The wireless devices are from various manufactures.
Given the scenario, choose the option for sending IP-to-user mappings to the NGFW.

NO.102 Given the screenshot what two types of route is the administrator configuring? (Choose two )

NO.103 An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated?
(Choose two.)

NO.104 You receive notification about new malware that infects hosts through malicious files transferred by FTP.
Which Security profile detects and protects your internal networks from this threat after you update your firewall’s threat signature database?

NO.105 Match each feature to the DoS Protection Policy or the DoS Protection Profile.

NO.106 An administrator notices that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would the administrator need to monitor and block to mitigate the malicious activity?

NO.107 Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?

NO.108 Given the image, which two options are true about the Security policy rules. (Choose two.)

NO.109 Match the Palo Alto Networks Security Operating Platform architecture to its description.