Practice Free Palo Alto Networks PCNSA Exam Questions Online, PCNSA Free Demo

Question No : 1
Which URL profiling action does not generate a log entry when a user attempts to access that URL?

A.Override
B.Allow
C.Block
D.Continue

Answer:
Explanation:
References:

Question No : 2
Which component is a building block in a Security policy rule?

A.decryption profile
B.destination interface
C.timeout (min)
D.application

Answer:
Explanation:
Reference: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-web-interface-help/policies/policies-security/buildingblocks-in-a-security-policy-rule.html

Question No : 3
What must be configured for the firewall to access multiple authentication profiles for external services to authenticate a non-local account?

A.authentication sequence
B.LDAP server profile
C.authentication server list
D.authentication list profile

Answer:

Question No : 4
You receive notification about new malware that infects hosts through malicious files transferred by FTP.
Which Security profile detects and protects your internal networks from this threat after you update your firewall’s threat signature database?

A.URL Filtering profile applied to inbound Security policy rules.
B.Data Filtering profile applied to outbound Security policy rules.
C.Antivirus profile applied to inbound Security policy rules.
D.Vulnerability Protection profile applied to outbound Security policy rules.

Answer:
Explanation:
Reference: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-profiles

Question No : 5
What can be used as match criteria for creating a dynamic address group?

A.Usernames
B.IP addresses
C.Tags
D.MAC addresses

Answer:

Question No : 6
Which statement is true about Panorama managed devices?

A.Panorama automatically removes local configuration locks after a commit from Panorama
B.Local configuration locks prohibit Security policy changes for a Panorama managed device
C.Security policy rules configured on local firewalls always take precedence
D.Local configuration locks can be manually unlocked from Panorama

Answer:
Explanation:
Reference: https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/administer-panorama/manage- locks-forrestricting-configuration-changes.html

Question No : 7
Given the topology, which zone type should you configure for firewall interface E1/1?

A.Tap
B.Tunnel
C.Virtual Wire
D.Layer3

Answer:

Question No : 8
How often does WildFire release dynamic updates?

A.every 5 minutes
B.every 15 minutes
C.every 60 minutes
D.every 30 minutes

Answer:

Question No : 9
Which URL Filtering profile action would you set to allow users the option to access a site only if they provide a URL admin password?

A.override
B.authorization
C.authentication
D.continue

Answer:
Explanation:
Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/url-filtering-concepts/url- filteringprofile-actions.html

Question No : 10
Which link in the web interface enables a security administrator to view the security policy rules that match new application signatures?

A.Review Apps
B.Review App Matches
C.Pre-analyze
D.Review Policies

Answer:

Test Online Free Palo Alto Networks PCNSA Exam Questions and Answers