PCNSA Free Practice Test

Which protocol used to map username to user groups when user-ID is configured?

1. A. SAML
2. B. RADIUS
3. C. TACACS+
4. D. LDAP

Correct Answer: D

You receive notification about new malware that infects hosts through malicious files transferred by FTP. Which Security profile detects and protects your internal networks from this threat after you update your firewall’s threat signature database?

1. A. URL Filtering profile applied to inbound Security policy rules.
2. B. Data Filtering profile applied to outbound Security policy rules.
3. C. Antivirus profile applied to inbound Security policy rules.
4. D. Vulnerability Protection profile applied to outbound Security policy rules.

Correct Answer: C

Match the Palo Alto Networks Security Operating Platform architecture to its description.

Solution:
Threat Intelligence Cloud – Gathers, analyzes, correlates, and disseminates threats to and from the network and endpoints located within the network.
Next-Generation Firewall – Identifies and inspects all traffic to block known threats
Advanced Endpoint Protection - Inspects processes and files to prevent known and unknown exploits

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

Which dynamic update type includes updated anti-spyware signatures?

1. A. Applications and Threats
2. B. GlobalProtect Data File
3. C. Antivirus
4. D. PAN-DB

Correct Answer: A

Place the following steps in the packet processing order of operations from first to last.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A