Online Access Free PaloAltoNetworks.PCNSA.v2022-02-01.q146 Practice Test (Page 9)

PCNSA Exam Question 36

How many zones can an interface be assigned with a Palo Alto Networks firewall?

A.two

B.three

C.four

D.one

PCNSA Exam Question 37

Complete the statement. A security profile can block or allow traffic____________

A.on unknown-tcp or unknown-udp traffic

B.after it is matched by a security policy that allows traffic

C.before it is matched by a security policy

D.after it is matched by a security policy that allows or blocks traffic

PCNSA Exam Question 38

A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future Public Cloud environments. All other required connections have already been enabled between the USERS- and the OUTSIDE-zone. What configuration-changes should the Firewall-admin make?

A.Create a security-rule that allows traffic from zone USERS to OUTSIDE to allow traffic from any source IP-address to any destination IP-address for application SSH

B.Create a custom-service-object called SERVICE-SSH for destination-port-TCP-22. Create a security-rule between zone USERS and OUTSIDE to allow traffic from any source IP-address to any destination IP-address for SERVICE-SSH

C.In addition to option c, an additional rule from zone OUTSIDE to USERS for application SSH from any source-IP-address to any destination-IP-address is required to allow the return-traffic from the SSH-servers to reach the server-admin

D.In addition to option a, a custom-service-object called SERVICE-SSH-RETURN that contains source-port-TCP-22 should be created. A second security-rule is required that allows traffic from zone OUTSIDE to USERS for SERVICE-SSH-RETURN for any source-IP-address to any destination-Ip-address

PCNSA Exam Question 39

Given the topology, which zone type should zone A and zone B to be configured with?

A.Layer2

B.Layer3

C.Tap

D.Virtual Wire

PCNSA Exam Question 40