Online Access Free PaloAltoNetworks.PCNSA.v2024-04-01.q357 Practice Test (Page 72)

PCNSA Exam Question 351

Your company occupies one floor in a single building. You have two Active Directory domain controllers on a single network. The firewall's management plane is only slightly utilized.
Which User-ID agent is sufficient in your network?

A.Windows-based agent deployed on each domain controller

B.PAN-OS integrated agent deployed on the firewall

C.Citrix terminal server agent deployed on the network

D.Windows-based agent deployed on the internal network a domain member

PCNSA Exam Question 352

Given the topology, which zone type should zone A and zone B to be configured with?

A.Layer2

B.Virtual Wire

C.Layer3

D.Tap

PCNSA Exam Question 353

Which two statements are true for the DNS Security service introduced in PAN-OS version 10.0? (Choose two.)

A.It functions like PAN-DB and requires activation through the app portal.

B.It eliminates the need for dynamic DNS updates.

C.It is automatically enabled and configured.

D.It removes the 100K limit for DNS entries for the downloaded DNS updates.

PCNSA Exam Question 354

Review the Screenshot:

Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the SERVER zone to the DMZ on SSH only.
Which rule group enables the required traffic?