Network Security Administrator PCNSA Exam Questions and Answers PDF

Palo Alto Networks Certified Network Security Administrator (PAN-OS 10.0) Questions and Answers

Question 85

Which two addresses should be reserved to enable DNS sinkholing? (Choose two.)

Options:

IPv6

IPv4

MAC

Question 86

Which statement best describes a common use of Policy Optimizer?

Options:

Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications.

Policy Optimizer can add or change a Log Forwarding profile for each Security policy selected.

Policy Optimizer can display which Security policies have not been used in the last 90 days.

Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists. Admins can then manually enable policies they want to keep and delete ones they want to remove.

Question 87

What do you configure if you want to set up a group of objects based on their ports alone?

Options:

Application groups

Service groups

Address groups

Custom objects

Question 88

An administrator is investigating a log entry for a session that is allowed and has the end reason of aged-out. Which two fields could help in determining if this is normal? (Choose two.)

Options:

Packets sent/received

IP Protocol

Action

Decrypted

Black Friday Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Network Security Administrator PCNSA Exam Questions and Answers PDF

Palo Alto Networks Certified Network Security Administrator (PAN-OS 10.0) Questions and Answers

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce