PCNSA実際の問題解答PDFには100%カバー率リアル試験問題 [Q50-Q74]

質問50、 What is the minimum timeframe that can be set on the firewall to check for new WildFire signatures?

質問51、 How would a Security policy need to be written to allow outbound traffic using Secure Shell (SSH) to destination ports tcp/22 and tcp/4422?

質問52、 In a Security policy, what is the quickest way to reset all policy rule hit counters to zero?

質問53、 Which interface does not require a MAC or IP address?

質問54、 An administrator configured a Security policy rule where the matching condition includes a single application and the action is set to deny.
What deny action will the firewall perform?

質問55、 Which action would an administrator take to ensure that a service object will be available only to the selected device group?

質問56、 What must be considered with regards to content updates deployed from Panorama?

質問57、 Match each rule type with its example

質問58、 Which information is included in device state other than the local configuration?

質問59、 Order the steps needed to create a new security zone with a Palo Alto Networks firewall.

質問60、 How are Application Fillers or Application Groups used in firewall policy?

質問61、 The firewall sends employees an application block page when they try to access Youtube.
Which Security policy rule is blocking the youtube application?

質問62、 Which file is used to save the running configuration with a Palo Alto Networks firewall?

質問63、 Based on the screenshot presented which column contains the link that when clicked opens a window to display all applications matched to the policy rule?

質問64、 An administrator is investigating a log entry for a session that is allowed and has the end reason of aged-out.
Which two fields could help in determining if this is normal? (Choose two.)

質問65、 Which type firewall configuration contains in-progress configuration changes?

質問66、 Which action can be performed when grouping rules by group tags?

質問67、 Given the image, which two options are true about the Security policy rules. (Choose two.)

質問68、 Actions can be set for which two items in a URL filtering security profile? (Choose two.)

質問69、 In which threat profile object would you configure the DNS Security service?

質問70、 Which three statements describe the operation of Security policy rules and Security Profiles?
(Choose three.)

質問71、 Based on the security policy rules shown, ssh will be allowed on which port?

質問72、 Which feature would be useful for preventing traffic from hosting providers that place few restrictions on content, whose services are frequently used by attackers to distribute illegal or unethical material?

質問73、

Given the topology, which zone type should interface E1/1 be configured with?

質問74、 How often are new and modified threat signatures and modified applications signatures published?