PCNSA試験無料問題集（360題）「Palo Alto Networks Certified Network Security Administrator 認定」

出題：1

What are three valid ways to map an IP address to a username? (Choose three.)

A. using the XML API

B. WildFire verdict reports

C. a user connecting into a GlobalProtect gateway using a GlobalProtect Agent

D. usernames inserted inside HTTP Headers

E. DHCP Relay logs

正解：A,C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which security profile should be used to classify malicious web content?

A. Web Content

B. URL Filtering

C. Antivirus

D. Vulnerability Protection

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

What can be used as match criteria for creating a dynamic address group?

A. MAC addresses

B. Tags

C. Usernames

D. IP addresses

正解：B 解答を投票する

出題：4

Which five Zero Trust concepts does a Palo Alto Networks firewall apply to achieve an integrated approach to prevent threats? (Choose five.)

A. User identification

B. Filtration protection

C. Anti-spyware

D. Vulnerability protection

E. Antivirus

F. Application identification

正解：A,C,D,E,F 解答を投票する

出題：5

Which two App-ID applications will need to be allowed to use Facebook-chat? (Choose two.)

A. facebook

B. facebook-base

C. facebook-chat

D. facebook-email

正解：B,C 解答を投票する

出題：6

Which stage of the cyber-attack lifecycle makes it important to provide ongoing education to users on spear phishing links, unknown emails, and risky websites?

A. reconnaissance

B. installation

C. exploitation

D. delivery

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which Palo Alto networks security operating platform service protects cloud-based application such as Dropbox and salesforce by monitoring permissions and shared and scanning files for Sensitive information?

A. Prisma SaaS

B. GlobalProtect

C. AutoFocus

D. Panorama

正解：A 解答を投票する

出題：8

Which profile should be used to obtain a verdict regarding analyzed files?

A. WildFire analysis

B. Advanced threat prevention

C. Vulnerability profile

D. Content-ID

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Which prevention technique will prevent attacks based on packet count?

A. vulnerability profile

B. zone protection profile

C. antivirus profile

D. URL filtering profile

正解：B 解答を投票する

出題：10

A website is unexpectedly allowed due to miscategorization.
What are two way-s to resolve this issue for a proper response? (Choose two.)

A. Identify the URL category being assigned to the website.
Edit the active URL Filtering profile and update that category's site access settings to block.

B. Create a URL category and assign the affected URL.Add a Security policy with a URL category qualifier of the custom URL category below the original policy. Set the policy action to Deny.

C. Create a URL category and assign the affected URL.
Update the active URL Filtering profile site access setting for the custom URL category to block.

D. Review the categorization of the website on https://urlfiltering.paloaltonetworks.com.
Submit for "request change*, identifying the appropriate categorization, and wait for confirmation before testing again.

正解：B,D 解答を投票する

出題：11

How is the hit count reset on a rule?

A. with a dataplane reboot

B. in the CLI, type command reset hitcount <POLICY-NAME>

C. select a security policy rule, right click Hit Count > Reset

D. Device > Setup > Logging and Reporting Settings > Reset Hit Count

正解：C 解答を投票する

出題：12

Which path in PAN-OS 10.2 is used to schedule a content update to managed devices using Panorama?

A. Panorama > Device Deployment > Dynamic Updates > Schedules > Add

B. Panorama > Content Updates > Device Deployment > Schedules > Add

C. Panorama > Dynamic Updates > Device Deployment > Schedules > Add

D. Panorama > Device Deployment > Content Updates > Schedules > Add

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：13

To what must an interface be assigned before it can process traffic?

A. Security Protection

B. Security profile

C. Security Zone

D. Security policy

正解：C 解答を投票する

出題：14

What are three ways application characteristics are used? (Choose three.)

A. As an Object to define Security policies

B. As a global filter in the Application Command Center (ACC)

C. As an attribute to define an application filter

D. As an attribute to define an application group

E. As a setting to define a new custom application

正解：C,D,E 解答を投票する

出題：15

What are two valid selections within an Anti-Spyware profile? (Choose two.)

A. Deny

B. Random early drop

C. Default

D. Drop

正解：C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：16

Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.

A. Act on Objective

B. Reconnaissance

C. Exploitation

D. Installation

正解：C 解答を投票する

PCNSA試験無料問題集「Palo Alto Networks Certified Network Security Administrator 認定」