PCNSA無料問題集「Palo Alto Networks Certified Network Security Administrator」

質問 1

Choose the option that correctly completes this statement. A Security Profile can block or allow traffic
____________.

（A）after it is matched by a security policy rule that allows traffic.

（B）after it is matched by a security policy rule that allows or blocks traffic.

（C）before it is matched to a Security policy rule.

（D）on either the data place or the management plane.

正解：A 解答を投票する

質問 2

According to the best practices for mission critical devices, what is the recommended interval for antivirus updates?

（A）weekly

（B）by minute

（C）hourly

（D）daily

正解：D 解答を投票する

質問 3

Which Security profile should be applied in order to protect against illegal code execution?

（A）Vulnerability Protection profile on denied traffic

（B）Vulnerability Protection profile on allowed traffic

（C）Antivirus profile on denied traffic

（D）Antivirus profile on allowed traffic

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Which two rule types allow the administrator to modify the destination zone? (Choose two )

（A）shadowed

（B）intrazone

（C）interzone

（D）universal

正解：C、D 解答を投票する

質問 5

Based on the screenshot what is the purpose of the group in User labelled ''it"?

（A）Allows "any" users to access servers in the DMZ zone

（B）Allows users in group "it" to access IT applications

（C）Allows users in group "DMZ" lo access IT applications

（D）Allows users to access IT applications on all ports

正解：B 解答を投票する

質問 6

Where within the URL Filtering security profile must a user configure the action to prevent credential submissions?

（A）URL Filtering > HTTP Header Insertion

（B）URL Filtering > URL Filtering Settings

（C）URL Filtering > Categories

（D）URL Filtering > Inline Categorization

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Which type of DNS signatures are used by the firewall to identify malicious and command-and-control domains?

（A）DNS Security signatures

（B）DNS Block signatures

（C）DNS Malware signatures

（D）DNS Malicious signatures

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which type of administrative role must you assign to a firewall administrator account, if the account must include a custom set of firewall permissions?

（A）Multi-Factor Authentication

（B）Dynamic

（C）SAML

（D）Role-based

正解：D 解答を投票する

質問 9

Identify the correct order to configure the PAN-OS integrated USER-ID agent.
3. add the service account to monitor the server(s)
2. define the address of the servers to be monitored on the firewall
4. commit the configuration, and verify agent connection status
1. create a service account on the Domain Controller with sufficient permissions to execute the User- ID agent

（A）2-3-4-1

（B）1-4-3-2

（C）1-3-2-4

（D）3-1-2-4

正解：C 解答を投票する

質問 10

Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?

（A）Root

（B）Dynamic

（C）Superuser

（D）Role-based

正解：D 解答を投票する

質問 11

Prior to a maintenance-window activity, the administrator would like to make a backup of only the running configuration to an external location.
What command in Device > Setup > Operations would provide the most operationally efficient way to achieve this outcome?

（A）export device state

（B）save candidate config

（C）export named configuration snapshot

（D）save named configuration snapshot

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

PCNSA 無料問題集「Palo Alto Networks Certified Network Security Administrator」

弊社を連絡する

関連リンク

トップ試験