Free Palo Alto Networks PCNSA Exam Dumps Questions & Answers

Which two features implement one-to-one translation of a source IP address while allowing the source port to change? (Choose two.)

• A.Dynamic IP
• B.Dynamic IP and Port (DIPP)
• C.Static IP
• D.Dynamic IP / Port Fallback

Which object would an administrator create to block access to all high-risk applications?

• A.application group
• B.HIP profile
• C.Vulnerability Protection profile
• D.application filter

A network has 10 domain controllers, multiple WAN links, and a network infrastructure with bandwidth needed to support mission-critical applications. Given the scenario, which type of User-ID agent is considered a best practice by Palo Alto Networks?

• A.Citrix terminal server with adequate data-plane resources
• B.PAN-OS integrated agent
• C.Captive Portal
• D.Windows-based agent on a domain controller

Users from the internal zone need to be allowed to Telnet into a server in the DMZ zone.
Complete the security policy to ensure only Telnet is allowed.
Security Policy: Source Zone: Internal to DMZ Zone __________services "Application defaults", and action = Allow

• A.USER-ID = 'Allow users in Trusted'
• B.Destination IP: 192.168.1.123/24
• C.Log Forwarding
• D.Application = 'Telnet'

Which type firewall configuration contains in-progress configuration changes?

• A.running
• B.committed
• C.candidate
• D.backup