Free Palo Alto Networks PCNSA Exam Dumps Questions & Answers

An administrator would like to use App-ID's deny action for an application and would like that action updated with dynamic updates as new content becomes available.
Which security policy action causes this?

• A.  Reset both
• B.  Reset server
• C.  Deny
• D.  Drop

Which five Zero Trust concepts does a Palo Alto Networks firewall apply to achieve an integrated approach to prevent threats? (Choose five.)

• A.  Antivirus
• B.  Vulnerability protection
• C.  Application identification
• D.  User identification
• E.  Filtration protection
• F.  Anti-spyware

Based on the image provided, which two statements apply to the Security policy rules? (Choose two.)

• A.  The Allow-Office-Programs rule is using an application group.
• B.  In the Allow-FTP policy, FTP is allowed using App-ID.
• C.  The Allow-Office-Programs rule is using an application filter.
• D.  The Allow-Social-Media rule allows all Facebook functions.

In which two Security Profiles can an action equal to the block IP feature be configured? (Choose two.)

• A.  URL Filtering
• B.  Antivirus b
• C.  Vulnerability Protection
• D.  Anti-spyware

The PowerBall Lottery has reached an unusually high value this week. Your company has decided to raise morale by allowing employees to access the PowerBall Lottery website (www.powerball.com) for just this week. However, the company does not want employees to access any other websites also listed in the URL filtering "gambling" category.
Which method allows the employees to access the PowerBall Lottery website but without unblocking access to the "gambling" URL category?

• A.  Add just the URL www.powerball.com to a Security policy allow rule.
• B.  Manually remove powerball.com from the gambling URL category.
• C.  Create a custom URL category, add *.powerball.com to it and allow it in the Security Profile.
• D.  Add *.powerball.com to the URL Filtering allow list.