Free Palo Alto Networks PCNSA Exam Dumps Questions & Answers

Match the cyber-attack lifecycle stage to its correct description.

Correct Answer:

Assume that traffic matches a Security policy rule but the attached Security Profiles is configured to block matching traffic Which statement accurately describes how the firewall will apply an action to matching traffic?

• A.  If it is an allowed rule, then the Security Profile action is applied last
• B.  If it is a block rule then the Security policy rule action is applied last
• C.  If it is a block rule then Security Profile action is applied last
• D.  If it is an allow rule then the Security policy rule is applied last

When HTTPS for management and GlobalProtect are enabled on the same interface, which TCP port is used for management access?

• A.  80
• B.  4443
• C.  443
• D.  8443

Which security policy rule would be needed to match traffic that passes between the Outside zone and Inside zone, but does not match traffic that passes within the zones?

• A.  interzone
• B.  universal
• C.  intrazone
• D.  global

What is considered best practice with regards to committing configuration changes?

• A.  Export configuration after each single configuration change performed
• B.  Disable the automatic commit feature that prioritizes content database installations before committing
• C.  Validate configuration changes prior to committing
• D.  Wait until all running and pending jobs are finished before committing