PCNSA V1

An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?A . Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategoryB . Create an Application...

Which five Zero Trust concepts does a Palo Alto Networks firewall apply to achieve an integrated approach to prevent threats? (Choose five.)A . User identificationB . Filtration protectionC . Vulnerability protectionD . AntivirusE . Application identificationF . Anti-spywareView AnswerAnswer: A,C,D,E,F

Which option lists the attributes that are selectable when setting up an Application filters?A . Category, Subcategory, Technology, and CharacteristicB . Category, Subcategory, Technology, Risk, and CharacteristicC . Name, Category, Technology, Risk, and CharacteristicD . Category, Subcategory, Risk, Standard Ports, and TechnologyView AnswerAnswer: B Explanation: Reference: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-web-interface-help/objects/objects-application- filters

Which type of security rule will match traffic between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?A . globalB . intrazoneC . interzoneD . universalView AnswerAnswer: D Explanation: References: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClomCAC

Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?A . Review PoliciesB . Review AppsC . Pre-analyzeD . Review App MatchesView AnswerAnswer: A Explanation: References: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/manage-new-app-ids-introduced- incontent-releases/review-new-app-id-impact-on- existing-policy-rules

DRAG DROP Match the Palo Alto Networks Security Operating Platform architecture to its description. View AnswerAnswer:

Which user mapping method could be used to discover user IDs in an environment with multiple Windows domain controllers?A . Active Directory monitoringB . Windows session monitoringC . Windows client probingD . domain controller monitoringView AnswerAnswer: A

Which path in PAN-OS 10.0 displays the list of port-based security policy rules?A . Policies> Security> Rule Usage> No App SpecifiedB . Policies> Security> Rule Usage> Port only specifiedC . Policies> Security> Rule Usage> Port-based RulesD . Policies> Security> Rule Usage> Unused AppsView AnswerAnswer: A Explanation: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/security-policy-rule-optimization/migrate-port-based-to-app-id-based-security-policy-rules.html

Which path is used to save and load a configuration with a Palo Alto Networks firewall?A . Device>Setup>ServicesB . Device>Setup>ManagementC . Device>Setup>OperationsD . Device>Setup>InterfacesView AnswerAnswer: C

Which two App-ID applications will need to be allowed to use Facebook-chat? (Choose two.)A . facebookB . facebook-chatC . facebook-baseD . facebook-emailView AnswerAnswer: B,C