Online Access Free PaloAltoNetworks.PCNSA.v2024-12-30.q267 Practice Test (Page 10)

PCNSA Exam Question 41

Which two features can be used to tag a username so that it is included in a dynamic user group?
(Choose two.)

A.GlobalProtect agent

B.XML API

C.User-ID Windows-based agent

D.log forwarding auto-tagging

PCNSA Exam Question 42

Assume a custom URL Category Object of "NO-FILES" has been created to identify a specific website How can file uploading/downloading be restricted for the website while permitting general browsing access to that website?

A.Create a Security policy that references NO-FILES as a URL Category qualifier, with an appropriate File Blocking profile

B.Create a Security policy that references NO-FILES as a URL Category qualifier, with an appropriate Data Filtering profile

C.Create a Security policy with a URL Filtering profile that references the site access setting of continue to NO-FILES

D.Create a Security policy with a URL Filtering profile that references the site access setting of block to NO-FILES

PCNSA Exam Question 43

The firewall sends employees an application block page when they try to access Youtube.
Which Security policy rule is blocking the youtube application?

A.allowed-security services

B.interzone-default

C.intrazone-default

D.Deny Google

PCNSA Exam Question 44

View the diagram. What is the most restrictive, yet fully functional rule, to allow general Internet and SSH traffic into both the DMZ and Untrust/lnternet zones from each of the lOT/Guest and Trust Zones?