[2022 年 10 月] PCNSA 免费样题练习一年更新 [Q36-Q53]

第 36 号 您要设置哪种 URL 过滤配置文件操作，才能允许用户在提供 URL 管理密码的情况下访问网站？

第 37 号 Based on the graphic, what is the purpose of the SSL/TLS Service profile configuration option?

第 38 号 An administrator would like to use App-ID’s deny action for an application and would like that action updated with dynamic updates as new content becomes available.
Which security policy action causes this?

第 39 号 哪种 Palo Alto Networks 防火墙安全平台可通过检查作为互联网网关部署的流量为移动端点提供网络安全？

NO.40 View the diagram. What is the most restrictive yet fully functional rule to allow general Internet and SSH traffic into both the DMZ and Untrust/lnternet zones from each of the lOT/Guest and Trust Zones?

第 41 号 Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

第 42 号 An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated?
(选择两个）。

第 43 号 Which license is required to use the Palo Alto Networks built-in IP address EDLs?

NO.44 Match the Palo Alto Networks Security Operating Platform architecture to its description.

第 45 号 What is the purpose of the automated commit recovery feature?

第 46 号 安排系统内处理 URL 分类的正确顺序。

NO.47 Which statement is true about Panorama managed devices?

第 48 号 根据所示的安全策略规则，哪个端口允许使用 ssh？

NO.49 You receive notification about a new malware that infects hosts. An infection results in the infected host attempting to contact a command-and-control server.
Which Security Profile detects and prevents this threat from establishing a command-and-control connection?

NO.50 Which two security profile types can be attached to a security policy? (Choose two.)

第 51 号 An administrator has configured a Security policy where the matching condition includes a single application and the action is deny.
If the application s default deny action is reset-both what action does the firewall take*?

第 52 号 根据所示的安全策略规则，哪个端口允许使用 ssh？

第 53 号 Which operations are allowed when working with App-ID application tags?