PCNSA Free Practice Test

What are two valid selections within an Antivirus profile? (Choose two.)

1. A. deny
2. B. drop
3. C. default
4. D. block-ip

Correct Answer: BC

An administrator has configured a Security policy where the matching condition includes a single application and the action is deny
If the application s default deny action is reset-both what action does the firewall take*?

1. A. It sends a TCP reset to the client-side and server-side devices
2. B. It silently drops the traffic and sends an ICMP unreachable code
3. C. It silently drops the traffic
4. D. It sends a TCP reset to the server-side device

Correct Answer: A

What are three factors that can be used in domain generation algorithms? (Choose three.)

1. A. cryptographic keys
2. B. time of day
3. C. other unique values
4. D. URL custom categories
5. E. IP address

Correct Answer: ABC
Domain generation algorithms (DGAs) are used to auto-generate domains, typically in large numbers within the context of establishing a malicious command-and-control (C2) communications channel. DGA-based
malware (such as Pushdo, BankPatch, and CryptoLocker) limit the number of domains from being blocked by hiding the location of their active C2 servers within a large number of possible suspects, and can be algorithmically generated based on factors such as time of day, cryptographic keys, or other unique values.
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/dns-security/domain-generation-a

Based on the show security policy rule would match all FTP traffic from the inside zone to the outside zone?

1. A. internal-inside-dmz
2. B. engress outside
3. C. inside-portal
4. D. intercone-default

Correct Answer: B

You receive notification about a new malware that infects hosts An infection results in the infected host attempting to contact a command-and-control server Which Security Profile when applied to outbound Security policy rules detects and prevents this threat from establishing a command-and-control connection?

1. A. Antivirus Profile
2. B. Data Filtering Profile
3. C. Vulnerability Protection Profile
4. D. Anti-Spyware Profile

Correct Answer: D
Anti-Spyware Security Profiles block spyware on compromised hosts from trying to communicate with external command-and-control (C2) servers, thus enabling you to detect malicious traffic leaving the network from infected clients.