Free PCNSA Exam Braindumps

An administrator has configured a Security policy where the matching condition includes a single application and the action is deny
If the application s default deny action is reset-both what action does the firewall take*?

1. A. It sends a TCP reset to the client-side and server-side devices
2. B. It silently drops the traffic and sends an ICMP unreachable code
3. C. It silently drops the traffic
4. D. It sends a TCP reset to the server-side device

Correct Answer: A

Which statement is true regarding a Best Practice Assessment?

1. A. The BPA tool can be run only on firewalls
2. B. It provides a percentage of adoption for each assessment data
3. C. The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus prevention activities
4. D. It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

Correct Answer: C

Place the following steps in the packet processing order of operations from first to last.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)

1. A. Layer-ID
2. B. User-ID
3. C. QoS-ID
4. D. App-ID

Correct Answer: BD

By default, which action is assigned to the interzone-default rule?

1. A. Reset-client
2. B. Reset-server
3. C. Deny
4. D. Allow

Correct Answer: C