Free Palo Alto Networks PCNSA Exam Dumps Questions & Answers

What are three valid source or D=destination conditions available as Security policy qualifiers? (Choose three.)

• A.  Zone ab
• B.  Address
• C.  User
• D.  Application
• E.  Service

How are Application Fillers or Application Groups used in firewall policy?

• A.  An Application Group is a dynamic way of grouping applications and can be configured as a nested member of an Application Group
• B.  An Application Filter is a dynamic way to group applications and can be configured as a nested member of an Application Group
• C.  An Application Filter is a static way of grouping applications and can be configured as a nested member of an Application Group
• D.  An Application Group is a static way of grouping applications and cannot be configured as a nested member of Application Group

Which statement best describes the use of Policy Optimizer?

• A.  Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications
• B.  Policy Optimizer can add or change a Log Forwarding profile for each Secunty policy selected
• C.  Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists Admins can then manually enable policies they want to keep and delete ones they want to remove
• D.  Policy Optimizer can display which Security policies have not been used in the last 90 days

Which two rule types allow the administrator to modify the destination zone? (Choose two )

• A.  intrazone
• B.  interzone
• C.  shadowed
• D.  universal

In order to attach an Antivirus, Anti-Spyware and Vulnerability Protection security profile to your Security Policy rules, which setting must be selected?

• A.  Policies > Security > Actions Tab > Select Group-Profiles as Profile Type
• B.  Policies > Security > Actions Tab > Select Default-Profiles as Profile Type
• C.  Policies > Security > Actions Tab > Select Tagged-Profiles as Profile Type
• D.  Policies > Security > Actions Tab > Select Profiles as Profile Type