Pass the Paloalto Networks Network Security Administrator PCNSA Questions and answers with CertsForce

Viewing page 6 out of 11 pages
Viewing questions 51-60 out of questions
Questions # 51:

Which type of administrator account cannot be used to authenticate user traffic flowing through the firewall’s

data plane?

Options:

A.

Kerberos user


B.

SAML user


C.

local database user


D.

local user


Expert Solution
Questions # 52:

Which order of steps is the correct way to create a static route?

Options:

A.

1) Enter the route and netmask

2) Enter the IP address for the specific next hop

3) Specify the outgoing interface for packets to use to go to the next hop

4) Add an IPv4 or IPv6 route by name


B.

1) Enter the route and netmask

2) Specify the outgoing interface for packets to use to go to the next hop

3) Enter the IP address for the specific next hop

4) Add an IPv4 or IPv6 route by name


C.

1) Enter the IP address for the specific next hop

2) Enter the route and netmask

3) Add an IPv4 or IPv6 route by name

4) Specify the outgoing interface for packets to use to go to the next hop


D.

1) Enter the IP address for the specific next hop

2) Add an IPv4 or IPv6 route by name

3) Enter the route and netmask

4) Specify the outgoing interface for packets to use to go to the next hop


Expert Solution
Questions # 53:

In which profile should you configure the DNS Security feature?

Options:

A.

URL Filtering Profile


B.

Anti-Spyware Profile


C.

Zone Protection Profile


D.

Antivirus Profile


Expert Solution
Questions # 54:

An administrator has an IP address range in the external dynamic list and wants to create an exception for one specific IP address in this address range.

Which steps should the administrator take?

Options:

A.

Add the address range to the Manual Exceptions list and exclude the IP address by selecting the entry.


B.

Add each IP address in the range as a list entry and then exclude the IP address by adding it to the Manual Exceptions list.


C.

Select the address range in the List Entries list. A column will open with the IP addresses. Select the entry to exclude.


D.

Add the specific IP address from the address range to the Manual Exceptions list by using regular expressions to define the entry.


Expert Solution
Questions # 55:

An administrator is implementing an exception to an external dynamic list by adding an entry to the list manually. The administrator wants to save the changes, but the OK button is grayed out.

What are two possible reasons the OK button is grayed out? (Choose two.)

Options:

A.

The entry contains wildcards.


B.

The entry is duplicated.


C.

The entry doesn't match a list entry.


D.

The entry matches a list entry.


Expert Solution
Questions # 56:

What must be configured before setting up Credential Phishing Prevention?

Options:

A.

Anti Phishing Block Page


B.

Threat Prevention


C.

Anti Phishing profiles


D.

User-ID


Expert Solution
Questions # 57:

Which the app-ID application will you need to allow in your security policy to use facebook-chat?

Options:

A.

facebook-email


B.

facebook-base


C.

facebook


D.

facebook-chat


Expert Solution
Questions # 58:

Which two features implement one-to-one translation of a source IP address while allowing the source port to change? (Choose two.)

Options:

A.

Static IP


B.

Dynamic IP / Port Fallback


C.

Dynamic IP


D.

Dynamic IP and Port (DIPP)


Expert Solution
Questions # 59:

An administrator is trying to enforce policy on some (but not all) of the entries in an external dynamic list. What is the maximum number of entries that they can be exclude?

Options:

A.

50


B.

100


C.

200


D.

1,000


Expert Solution
Questions # 60:

During the packet flow process, which two processes are performed in application identification? (Choose two.)

Options:

A.

pattern based application identification


B.

application override policy match


C.

session application identified


D.

application changed from content inspection


Expert Solution
Viewing page 6 out of 11 pages
Viewing questions 51-60 out of questions