Palo Alto Network (PCNSA) Exam Domain 6 - Deployment Optimization

Palo Alto Network (PCNSA) Exam Domain 6 -
Deployment Optimization

What free tool provided from Palo Alto Networks Firewall and Panorama evaultes a device's
configuration by measuring the adoption rate of a firewall's capabilities, and by validating whether the
polices adhere to best practices? - ✔✔Best Practice Assessment (BPA)



The Best Practice Assessment (BPA) comprises of what components? - ✔✔Security Policy Adoption
Heatmap

BPA assessment component tool



What item is required for the Best Practice Assessment (BPA) components to conduct it analysis? - ✔✔
Tech Support File



Where can PAN Tech Support File be retrieve from? - ✔✔The Firewall or Panorama



Which BPA component measures the adoption rate of PAN firewall features? - ✔✔Heatmap



What are the features does the Heatmap component inspect? - ✔✔WildFire, Threat Prevention, URL-
File-Data filtering, User-App ID, Service-Port, Logging



What are the PAN features that cannot realistically meet the 100% compliance from the Best Practice
Assessment (BPA)? - ✔✔DNS Sinkhole

URL Filtering



The BPA tool consist of which components? - ✔✔Security

Policy Based Forwarding