Free Palo Alto Networks PCNSA Exam Dumps Questions & Answers

Starting with PAN-OS version 9.1, application dependency information is now reported in which two locations? (Choose two.)

• A.  on the App Dependency tab in the Commit Status window
• B.  on the Policy Optimizer's Rule Usage page
  C on the Application tab in the Security Policy Rule creation window
• C.  on the Objects > Applications browser pages

An administrator wants to create a No-NAT rule to exempt a flow from the default NAT rule. What is the best way to do this?

• A.  Create a Security policy rule to allow the traffic.
• B.  Create a static NAT rule translating to the destination interface.
• C.  Create a static NAT rule with an application override.
• D.  Create a new NAT rule with the correct parameters and leave the translation type as None

Based on the network diagram provided, which two statements apply to traffic between the User and Server networks? (Choose two.)

• A.  Traffic restrictions are not possible, because the networks are in the same zone.
• B.  Traffic is permitted through the default interzone "allow" rule.
• C.  Traffic is permitted through the default intrazone "allow" rule.
• D.  Traffic restrictions are possible by modifying intrazone rules.

Which three statement describe the operation of Security Policy rules or Security Profiles? (Choose three)

• A.  Security policy rules inspect but do not block traffic.
• B.  Security Policy rules are attached to Security Profiles.
• C.  Security Policy rules can block or allow traffic.
• D.  Security Profile are attached to security policy rules.
• E.  Security Profile should be used only on allowed traffic.

For the firewall to use Active Directory to authenticate users, which Server Profile is required in the Authentication Profile?

• A.  LDAP
• B.  SAML
• C.  TACACS+
• D.  RADIUS