PCNSA Practice Test

PCNSA Practice Test practice questions, page 16 of 17, with answer review and explanations.

Question 76

Which data flow direction is protected in a zero-trust firewall deployment that is not protected in a perimeter-only firewall deployment?

  1. north-south
  2. inbound
  3. outbound
  4. east-west

Question 77

Which protocol is used to map usernames to user groups when User-ID is configured?

  1. TACACS+
  2. SAML
  3. LDAP
  4. RADIUS

Question 78

Which definition describes the guiding principle of the zero-trust architecture?

  1. trust, but verify
  2. always connect and verify
  3. never trust, never connect
  4. never trust, always verify

Question 79

All users from the internal zone must be allowed only Telnet access to a server in the DMZ zone. Complete the two empty fields in the Security policy rules that permits only this type of access. Source Zone: Internal - Destination Zone: DMZ Zone - Application: _________? Service: ____________? Action: allow - (Choose two.)

  1. Service = ג€application-defaultג€
  2. Service = ג€service-telnetג€
  3. Application = ג€Telnetג€
  4. Application = ג€anyג€

Question 80

In which profile should you configure the DNS Security feature?

  1. Anti-Spyware Profile
  2. Zone Protection Profile
  3. Antivirus Profile
  4. URL Filtering Profile