PCNSA Practice Test

PCNSA Practice Test practice questions, page 17 of 17, with answer review and explanations.

Question 81

Which two statements are true for the DNS Security service introduced in PAN-OS version 9.0? (Choose two.)

  1. It is automatically enabled and configured.
  2. It eliminates the need for dynamic DNS updates.
  3. It functions like PAN-DB and requires activation through the app portal.
  4. It removes the 100K limit for DNS entries for the downloaded DNS updates.

Question 82

Which two features can be used to tag a username so that it is included in a dynamic user group? (Choose two.)

  1. GlobalProtect agent
  2. XML API
  3. User-ID Windows-based agent
  4. log forwarding auto-tagging

Question 83

The CFO found a malware infected USB drive in the parking lot, which when inserted infected their corporate laptop. The malware contacted a known command- and-control server, which caused the infected laptop to begin exfiltrating corporate data. Which security profile feature could have been used to prevent the communication with the command-and-control server?

  1. Create an anti-spyware profile and enable DNS Sinkhole feature.
  2. Create an antivirus profile and enable its DNS Sinkhole feature.
  3. Create a URL filtering profile and block the DNS Sinkhole URL category
  4. Create a Data Filtering Profiles and enable its DNS Sinkhole feature.

Question 84

You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?

  1. virtual router
  2. Admin Role profile
  3. DNS proxy
  4. service route