PCNSA Free Practice Test

Given the network diagram, traffic should be permitted for both Trusted and Guest users to access general Internet and DMZ servers using SSH. web-browsing and SSL applications

Which policy achieves the desired results?
A)

B)

C)

D)

1. A. Option
2. B. Option
3. C. Option
4. D. Option

Correct Answer: C

DRAG DROP
Place the steps in the correct packet-processing order of operations.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

Which data flow direction is protected in a zero trust firewall deployment that is not protected in a perimeter-only firewall deployment?

1. A. outbound
2. B. north south
3. C. inbound
4. D. east west

Correct Answer: D

Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT.

Which Security policy rule will allow traffic to flow to the web server?
Solution:
Reference:https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/nat/nat-configuration-examples/destination-nat-exampleone-to-one-mapping

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

Given the scenario, which two statements are correct regarding multiple static default routes? (Choose two.)

1. A. Path monitoring does not determine if route is useable
2. B. Route with highest metric is actively used
3. C. Path monitoring determines if route is useable
4. D. Route with lowest metric is actively used

Correct Answer: CD