PCNSA PCNSA Threat Prevention 2

Question 1

What is the recommended WildFire file blocking action for unknown files in a high-security environment?

Accepted Answer

Forward for analysis

Answer

Forwarding unknown files to WildFire for analysis allows the firewall to receive a verdict and take appropriate action.

Question 2

Which profile type must be attached to a security policy rule for threat prevention to be enforced?

Accepted Answer

Security profile

Answer

Security profiles (Antivirus, Anti-Spyware, Vulnerability Protection, etc.) must be attached to security policy rules to enforce threat inspection.

Question 3

What does the 'reset-both' action do in a Palo Alto Networks threat prevention profile?

Accepted Answer

Sends TCP reset to both the client and the server

Answer

The reset-both action terminates the TCP connection by sending a TCP RST to both the client and the server simultaneously.

Question 4

In Palo Alto Networks, what is a 'Security Profile Group' used for?

Accepted Answer

Combining multiple security profiles into a single object for easy policy assignment

Answer

A Security Profile Group bundles multiple individual profiles (Antivirus, Anti-Spyware, etc.) so they can be applied to policy rules as a single object.

Question 5

Which threat severity level in Palo Alto Networks indicates the highest risk and requires immediate attention?

Accepted Answer

Critical

Answer

Critical severity indicates the most serious threats, such as those that could allow full system compromise or remote code execution.

PCNSA - Palo Alto Networks Certified Network Security Administrator Practice Test

PCNSA - Palo Alto Networks Certified Network Security Administrator Practice Test

PCNSA PCNSA Threat Prevention 2