PCNSA Practice Test

PCNSA Practice Test practice questions, page 15 of 17, with answer review and explanations.

Question 71

How do you reset the hit count on a Security policy rule?

  1. Select a Security policy rule, and then select Hit Count > Reset.
  2. Reboot the data-plane.
  3. First disable and then re-enable the rule.
  4. Type the CLI command reset hitcount .

Question 72

Given the topology, which zone type should you configure for firewall interface E1/1?

  1. Tap
  2. Tunnel
  3. Virtual Wire
  4. Layer3

Question 73

Which interface type is part of a Layer 3 zone with a Palo Alto Networks firewall?

  1. Management
  2. High Availability
  3. Aggregate
  4. Aggregation

Question 74

Which security policy rule would be needed to match traffic that passes between the Outside zone and Inside zone, but does not match traffic that passes within the zones?

  1. intrazone
  2. interzone
  3. universal
  4. global

Question 75

Four configuration choices are listed, and each could be used to block access to a specific URL. If you configured each choice to block the same URL then which choice would be the last to block access to the URL?

  1. EDL in URL Filtering Profile
  2. Custom URL category in URL Filtering Profile
  3. Custom URL category in Security policy rule
  4. PAN-DB URL category in URL Filtering Profile