PCNSA Practice Test

PCNSA Practice Test practice questions, page 9 of 17, with answer review and explanations.

Question 41

Given the image, which two options are true about the Security policy rules. (Choose two.)

  1. The Allow-Office-Programs rule is using an Application Filter.
  2. In the Allow-FTP policy, FTP is allowed using App-ID.
  3. The Allow-Office-Programs rule is using an Application Group.
  4. The Allow-Social-Media rule allows all of Facebook's functions.

Question 42

Which type of Security policy rule would match traffic flowing between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?

  1. global
  2. intrazone
  3. interzone
  4. universal

Question 43

Which Palo Alto Networks firewall security platform provides network security for mobile endpoints by inspecting traffic deployed as internet gateways?

  1. GlobalProtect
  2. AutoFocus
  3. Aperture
  4. Panorama

Question 44

Which two statements are correct regarding multiple static default routes when they are configured as shown in the image? (Choose two.)

  1. Path monitoring does not determine if route is useable.
  2. Route with highest metric is actively used.
  3. Path monitoring determines if route is useable.
  4. Route with lowest metric is actively used.

Question 45

Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can run malicious code against a targeted machine.

  1. Exploitation
  2. Installation
  3. Reconnaissance
  4. Act on Objective