最新的Palo Alto Networks Certified Network Security Administrator - PCNSA免費考試真題
An administrator wants to create a No-NAT rule to exempt a flow from the default NAT rule. What is the best way to do this?
正確答案: A
A systems administrator momentarily loses track of which is the test environment firewall and which is the production firewall. The administrator makes changes to the candidate configuration of the production firewall, but does not commit the changes. In addition, the configuration was not saved prior to making the changes.
Which action will allow the administrator to undo the changes?
Which action will allow the administrator to undo the changes?
正確答案: B
說明：（僅 Fast2test 成員可見）
An administrator is updating Security policy to align with best practices.
Which Policy Optimizer feature is shown in the screenshot below?
正確答案: B
Which three types of authentication services can be used to authenticate user traffic flowing through the firewalls data plane? (Choose three )
正確答案: A,C,E
An administrator wishes to follow best practices for logging traffic that traverses the firewall Which log setting is correct?
正確答案: C
Which two types of profiles are needed to create an authentication sequence? (Choose two.)
正確答案: A,B
說明：（僅 Fast2test 成員可見）
What are three ways application characteristics are used? (Choose three.)
正確答案: A,C,E
What Policy Optimizer policy view differ from the Security policy do?
正確答案: D
說明：（僅 Fast2test 成員可見）
Which Security policy action will message a user's browser that their web session has been terminated?
正確答案: B
說明：（僅 Fast2test 成員可見）
An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. The interzone-default was never changed from its default configuration.
Why doesn't the administrator see the traffic?
Why doesn't the administrator see the traffic?
正確答案: B
Which option is part of the content inspection process?
正確答案: A
What two authentication methods on the Palo Alto Networks firewalls support authentication and authorization for role-based access control? (Choose two.)
正確答案: A,B
Which statement is true regarding a Best Practice Assessment?
正確答案: B
Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.
正確答案: B