Labour Day Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bigdisc65

Free PCNSA Questions Attempt

Page: 15 / 26
Question 60

Which statement is true about Panorama managed devices?

Options:

A.

Panorama automatically removes local configuration locks after a commit from Panorama

B.

Local configuration locks prohibit Security policy changes for a Panorama managed device

C.

Security policy rules configured on local firewalls always take precedence

D.

Local configuration locks can be manually unlocked from Panorama

Question 61

Recently changes were made to the firewall to optimize the policies and the security team wants to see if those changes are helping.

What is the quickest way to reset the hit counter to zero in all the security policy rules?

Options:

A.

At the CLI enter the command reset rules and press Enter

B.

Highlight a rule and use the Reset Rule Hit Counter > Selected Rules for each rule

C.

Reboot the firewall

D.

Use the Reset Rule Hit Counter > All Rules option

Question 62

Which feature must be configured to enable a data plane interface to submit DNS queries originated from the firewall on behalf of the control plane?

Options:

A.

Service route

B.

Admin role profile

C.

DNS proxy

D.

Virtual router

Question 63

Which prevention technique will prevent attacks based on packet count?

Options:

A.

zone protection profile

B.

URL filtering profile

C.

antivirus profile

D.

vulnerability profile

Page: 15 / 26
Exam Code: PCNSA
Exam Name: Palo Alto Networks Certified Network Security Administrator (PAN-OS 10.0)
Last Update: May 3, 2024
Questions: 362
PCNSA pdf

PCNSA PDF

$28  $80
PCNSA Engine

PCNSA Testing Engine

$33.25  $95
PCNSA PDF + Engine

PCNSA PDF + Testing Engine

$45.5  $130