PCNSA試験無料問題集（360題）「Palo Alto Networks Certified Network Security Administrator 認定」

出題：1

Which built-in IP address EDL would be useful for preventing traffic from IP addresses that are verified as unsafe based on WildFire analysis Unit 42 research and data gathered from telemetry?

A. Palo Alto Networks C&C IP Addresses

B. Palo Alto Networks High-Risk IP Addresses

C. Palo Alto Networks Known Malicious IP Addresses

D. Palo Alto Networks Bulletproof IP Addresses

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which two App-ID applications will need to be allowed to use Facebook-chat? (Choose two.)

A. facebook

B. facebook-base

C. facebook-chat

D. facebook-email

正解：B,C 解答を投票する

出題：3

Based on the graphic, what is the purpose of the SSL/TLS Service profile configuration option?

A. It defines the SSUTLS encryption strength used to protect the management interface.

B. It defines the certificate to send to the client's browser from the management interface.

C. It defines the firewall's global SSL/TLS timeout values.

D. It defines the CA certificate used to verify the client's browser.

正解：B 解答を投票する

出題：4

Match the network device with the correct User-ID technology.

正解：

Explanation:
Microsoft Exchange - Server monitoring
Linux authentication - syslog monitoring
Windows Client - client probing
Citrix client - Terminal Services agent

出題：5

URL categories can be used as match criteria on which two policy types? (Choose two.)

A. decryption
C application override

B. authentication

C. NAT

正解：A,B 解答を投票する

出題：6

An administrator wants to enable access to www.paloaltonetworks.com while denying access to all other sites in the same category.
Which object should the administrator create to use as a match condition for the security policy rule that allows access to www.paloaltonetworks.com?

A. Address ab

B. Service

C. Application group

D. URL category

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Place the following steps in the packet processing order of operations from first to last.

正解：

出題：8

Access to which feature requires the PAN-OS Filtering license?

A. DNS Security

B. Custom URL categories

C. PAN-DB database

D. URL external dynamic lists

正解：C 解答を投票する

出題：9

How can a complete overview of the logs be displayed to an administrator who has permission in the system to view them?

A. Modify the number of columns visible on the page

B. Select the unified log entry in the side menu.

C. Modify the number of logs visible on each page.

D. Select the system logs entry in the side menu.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

What is the default action for the SYN Flood option within the DoS Protection profile?

A. Reset-client

B. Alert

C. Random Early Drop

D. Sinkhole

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

An administrator wants to create a NAT policy to allow multiple source IP addresses to be translated to the same public IP address. What is the most appropriate NAT policy to achieve this?

A. Dynamic IP and Port

B. Dynamic IP

C. Static IP

D. Destination

正解：A 解答を投票する

出題：12

In a File Blocking profile, which two actions should be taken to allow file types that support critical apps?
(Choose two.)

A. Edit the Strict profile.

B. Set the action to Continue.

C. Use URL filtering to limit categories in which users can transfer files.

D. Clone and edit the Strict profile.

正解：A,D 解答を投票する

PCNSA試験無料問題集「Palo Alto Networks Certified Network Security Administrator 認定」