Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Administrator (PCNSA) · Palo Alto Networks
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Threat Prevention subscription takes care of everything except URLs. PA used to provide option of updating URL DB but its no more available. Now URL filtering works more like look ups. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-upgrade/software-and-content-updates/dynamic-content-updates So, the answer is certainly B.
All are correct except B. Option A is done by configuring Wildfire to send an alert when something new is discovered
I believe this refers to when you go to Device and Dynamic Updates. You can't update the URL list from here as it automatically connects to PAN-DB to check the URL before blocking or allowing. You can update AV and App-ID signatures from there. I don't think you can update malicious domains from there, I can't remember from memory