Palo Alto Networks PCNSA Quiz 3 Topic 7 Questions 11-15

Question: 1

All users from the internal zone must be allowed only Telnet access to a server in the DMZ zone. Complete the two empty fields in the Security Policy rules that permits only this type of access.

q1_PCNSA

Choose two.

AService = 'any'

BApplication = 'Telnet'

CService - 'application-default'

DApplication = 'any'

Show Answer

Question: 2

Which statements is true regarding a Heatmap report?

AWhen guided by authorized sales engineer, it helps determine te areas of greatest security risk.

BIt provides a percentage of adoption for each assessment area.

CIt runs only on firewall.

DIt provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture.

Show Answer

Question: 3

Which Security profile can you apply to protect against malware such as worms and Trojans?

Adata filtering

Bantivirus

Cvulnerability protection

Danti-spyware

Show Answer

Question: 4

You have been tasked to configure access to a new web server located in the DMZ

Based on the diagram what configuration changes are required in the NGFW virtual router to route traffic from the 10 1 1 0/24 network to 192 168 1 0/24?

q4_PCNSA

AAdd a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 192.168 1.10

BAdd a route with the destination of 192 168 1 0/24 using interface Eth 1/2 with a next-hop of 172.16.1.2

CAdd a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 172.16.1.2

DAdd a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 192.168.1.254

Show Answer

Question: 5

All users from the internal zone must be allowed only Telnet access to a server in the DMZ zone. Complete the two empty fields in the Security Policy rules that permits only this type of access.

q5_PCNSA

Choose two.

AService = 'any'

BApplication = 'Telnet'

CService - 'application-default'

DApplication = 'any'

Show Answer

Palo Alto Networks PCNSA Quiz:3 Topic:7 Questions:11-15