Online Access Free PaloAltoNetworks.PCNSA.v2023-03-11.q129 Practice Test (Page 7)

PCNSA Exam Question 26

Which statement best describes the use of Policy Optimizer?

A.Policy Optimizer can add or change a Log Forwarding profile for each Secunty policy selected

B.Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications

C.Policy Optimizer can display which Security policies have not been used in the last 90 days

D.Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists Admins can then manually enable policies they want to keep and delete ones they want to remove

PCNSA Exam Question 27

Which option lists the attributes that are selectable when setting up an Application filters?

A.Category, Subcategory, Technology, and Characteristic

B.Category, Subcategory, Technology, Risk, and Characteristic

C.Name, Category, Technology, Risk, and Characteristic

D.Category, Subcategory, Risk, Standard Ports, and Technology

PCNSA Exam Question 28

How is the hit count reset on a rule?

A.select a security policy rule, right click Hit Count > Reset

B.in the CLI, type command reset hitcount <POLICY-NAME>

C.with a dataplane reboot

D.Device > Setup > Logging and Reporting Settings > Reset Hit Count

PCNSA Exam Question 29

An administrator wishes to follow best practices for logging traffic that traverses the firewall Which log setting is correct?

A.Disable all logging

B.Enable Log at Session End

C.Enable Log at Session Start

D.Enable Log at both Session Start and End

PCNSA Exam Question 30

A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future Public Cloud environments. All other required connections have already been enabled between the USERS- and the OUTSIDE-zone. What configuration-changes should the Firewall-admin make?

A.Create a security-rule that allows traffic from zone USERS to OUTSIDE to allow traffic from any source IP-address to any destination IP-address for application SSH

B.In addition to option a, a custom-service-object called SERVICE-SSH-RETURN that contains source-port-TCP-22 should be created. A second security-rule is required that allows traffic from zone OUTSIDE to USERS for SERVICE-SSH-RETURN for any source-IP-address to any destination-Ip-address

C.In addition to option c, an additional rule from zone OUTSIDE to USERS for application SSH from any source-IP-address to any destination-IP-address is required to allow the return-traffic from the SSH-servers to reach the server-admin

D.Create a custom-service-object called SERVICE-SSH for destination-port-TCP-22. Create a security-rule between zone USERS and OUTSIDE to allow traffic from any source IP-address to any destination IP-address for SERVICE-SSH

Other Version: 5136PaloAltoNetworks.PCNSA.v2024-12-30.q267; 7818PaloAltoNetworks.PCNSA.v2024-04-01.q357; 5494PaloAltoNetworks.PCNSA.v2023-10-04.q185; 5817PaloAltoNetworks.PCNSA.v2023-07-17.q177; 6988PaloAltoNetworks.PCNSA.v2022-09-20.q168; 7190PaloAltoNetworks.PCNSA.v2022-02-01.q146; 5878PaloAltoNetworks.PCNSA.v2021-08-25.q111; 104Palo-Alto-Networks.Braindumpspass.PCNSA.v2021-08-18.by.page.129q.pdf

Latest Upload: 181CBIC.CIC.v2026-06-15.q123; 125Peoplecert.ITIL-4-Specialist-High-velocity-IT.v2026-06-15.q16; 171HashiCorp.Terraform-Associate-004.v2026-06-15.q126; 130Peoplecert.ITILFNDv5.v2026-06-15.q26; 127Workday.Workday-Pro-HCM-Reporting.v2026-06-15.q28; 129Fortinet.NSE5_SSE_AD-7.6.v2026-06-15.q17; 306PMI.PMI-ACP.v2026-06-15.q523; 167LinuxFoundation.CKAD.v2026-06-15.q118; 161CrowdStrike.CCSE-204.v2026-06-12.q25; 199VMware.2V0-17.25.v2026-06-12.q49

PCNSA Exam Question 26

PCNSA Exam Question 27

PCNSA Exam Question 28

PCNSA Exam Question 29

PCNSA Exam Question 30

Download PDF File