PCNSA Free Practice Test

Match the network device with the correct User-ID technology.

Solution:
Microsoft Exchange – Server monitoring Linux authentication – syslog monitoring Windows Client – client probing
Citrix client – Terminal Services agent

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

Which rule type is appropriate for matching traffic both within and between the source and destination zones?

1. A. interzone
2. B. shadowed
3. C. intrazone
4. D. universal

Correct Answer: A

Given the network diagram, traffic should be permitted for both Trusted and Guest users to access general Internet and DMZ servers using SSH. web-browsing and SSL applications

Which policy achieves the desired results?
A)

B)

C)

D)

1. A. Option
2. B. Option
3. C. Option
4. D. Option

Correct Answer: C

An internal host wants to connect to servers of the internet through using source NAT. Which policy is required to enable source NAT on the firewall?

1. A. NAT policy with source zone and destination zone specified
2. B. post-NAT policy with external source and any destination address
3. C. NAT policy with no source of destination zone selected
4. D. pre-NAT policy with external source and any destination address

Correct Answer: A

Based on the screenshot what is the purpose of the included groups?

1. A. They are only groups visible based on the firewall's credentials.
2. B. They are used to map usernames to group names.
3. C. They contain only the users you allow to manage the firewall.
4. D. They are groups that are imported from RADIUS authentication servers.

Correct Answer: B