Certified Network Security Administrator Exam Questions PDF download

QUESTION: 71

How do you reset the hit count on a Security policy rule?

Select a Security policy rule, and then select Hit Count > Reset.
Reboot the data-plane.
First disable and then re-enable the rule.
Type the CLI command reset hitcount <POLICY-NAME>.

Answer(s): A

Reveal Solution Next Question

QUESTION: 72

Given the topology, which zone type should you configure for firewall interface E1/1?

Tap
Tunnel
Virtual Wire
Layer3

Answer(s): A

Reveal Solution Next Question

QUESTION: 73

Which interface type is part of a Layer 3 zone with a Palo Alto Networks firewall?

Management
High Availability
Aggregate
Aggregation

Answer(s): C

Reveal Solution Next Question

QUESTION: 74

Which security policy rule would be needed to match traffic that passes between the Outside zone and Inside zone, but does not match traffic that passes within the zones?

intrazone
interzone
universal
global

Answer(s): B

Reveal Solution Next Question

Four configuration choices are listed, and each could be used to block access to a specific URL. If you configured each choice to block the same URL then which choice would be the last to block access to the URL?

EDL in URL Filtering Profile
Custom URL category in URL Filtering Profile
Custom URL category in Security policy rule
PAN-DB URL category in URL Filtering Profile

Answer(s): D

Reveal Solution Next Question

Palo Alto Networks Certified Network Security Administrator PCNSA Exam Questions in PDF

Free Palo Alto Networks PCNSA Dumps Questions (page: 15)

QUESTION: 71

QUESTION: 72

QUESTION: 73

QUESTION: 74

QUESTION: 75