PCNSA Practice Test

PCNSA Practice Test practice questions, page 3 of 17, with answer review and explanations.

Question 11

Which User-ID mapping method should be used for an environment with users that do not authenticate to Active Directory?

  1. Windows session monitoring
  2. passive server monitoring using the Windows-based agent
  3. Captive Portal
  4. passive server monitoring using a PAN-OS integrated User-ID agent

Question 12

An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

  1. Create an Application Filter and name it Office Programs, then filter it on the business-systems category, office-programs subcategory
  2. Create an Application Group and add business-systems to it
  3. Create an Application Filter and name it Office Programs, then filter it on the business-systems category
  4. Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office

Question 13

Which statement is true regarding a Best Practice Assessment?

  1. The BPA tool can be run only on firewalls
  2. It provides a percentage of adoption for each assessment area
  3. The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus prevention activities
  4. It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

Question 14

Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

  1. intrazone-default
  2. Deny Google
  3. allowed-security services
  4. interzone-default

Question 15

Choose the option that correctly completes this statement. A Security Profile can block or allow traffic ____________.

  1. on either the data place or the management plane.
  2. after it is matched by a security policy rule that allows traffic.
  3. before it is matched to a Security policy rule.
  4. after it is matched by a security policy rule that allows or blocks traffic.