Free Palo Alto Networks PCNSA Exam Dumps Questions & Answers

Which protocol used to map username to user groups when user-ID is configured?

• A.  LDAP
• B.  RADIUS
• C.  SAML
• D.  TACACS+

Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.

Which two Security policy rules will accomplish this configuration? (Choose two.)

• A.  Untrust (Any)to DMZ (10.1.1.100. 10.1.1.101), ssh, web-browsing-Allow
• B.  Untrust (Any) to Untrust (10.1.1.1), ssh -Allow
• C.  Untrust (Any) to DMZ (1.1.1.100), ssh - Allow
• D.  Untrust (Any) to DMZ (1.1.1.100), web-browsing - Allow
• E.  Untrust (Any) to Untrust (10.1.1.1), web-browsing -Allow

Which action results in the firewall blocking network traffic without notifying the sender?

• A.  Deny
• B.  Reset Client
• C.  Drop
• D.  No notification

Which statement best describes a common use of Policy Optimizer?

• A.  Policy Optimizer can add or change a Log Forwarding profile for each Security policy selected.
• B.  Policy Optimizer can display which Security policies have not been used in the last 90 days.
• C.  Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists. Admins can then manually enable policies they want to keep and delete ones they want to remove.
• D.  Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications.

In a File Blocking profile, which two actions should be taken to allow file types that support critical apps?
(Choose two.)

• A.  Edit the Strict profile.
• B.  Use URL filtering to limit categories in which users can transfer files.
• C.  Clone and edit the Strict profile.
• D.  Set the action to Continue.