Network Security Administrator PCNSA Paloalto Networks Study Notes

Palo Alto Networks Certified Network Security Administrator (PAN-OS 10.0) Questions and Answers

Question 81

In which stage of the Cyber-Attack Lifecycle would the attacker inject a PDF file within an email?

Weaponization

Reconnaissance

Installation

Command and Control

Exploitation

Question 82

Based on the security policy rules shown, ssh will be allowed on which port?

Question 83

In a security policy what is the quickest way to rest all policy rule hit counters to zero?

Use the CLI enter the command reset rules all

Highlight each rule and use the Reset Rule Hit Counter > Selected Rules.

use the Reset Rule Hit Counter > All Rules option.

Reboot the firewall.

Question 84

Assume a custom URL Category Object of "NO-FILES" has been created to identify a specific website

How can file uploading/downloading be restricted for the website while permitting general browsing access to that website?

Create a Security policy with a URL Filtering profile that references the site access setting of continue to NO-FILES

Create a Security policy with a URL Filtering profile that references the site access setting of block to NO-FILES

Create a Security policy that references NO-FILES as a URL Category qualifier, with an appropriate Data Filtering profile

Create a Security policy that references NO-FILES as a URL Category qualifier, with an appropriate File Blocking profile