Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 121:

  An administrator is trying to implement an exception to an external dynamic list manually. Some entries are shown underlined in red.

  What would cause this error?

  A. Entries contain symbols.
  B. Entries are wildcards.
  C. Entries contain regular expressions.
  D. Entries are duplicated.
  D. Entries are duplicated.

  ---

  Explanation/Reference:

  You cannot save your changes to the external dynamic list if you have duplicate entries in the Manual Exceptions list. To identify duplicate entries, look for entries with a red underline.

• Question 122:

  Given the screenshot what two types of route is the administrator configuring? (Choose two )

  

  A. default route
  B. OSPF
  C. BGP
  D. static route
  A. default route

• Question 123:

  An administrator needs to create a Security policy rule that matches DNS traffic within the LAN zone, and also needs to match DNS traffic within the DMZ zone The administrator does not want to allow traffic between the DMZ and LAN zones. Which Security policy rule type should they use?

  A. default
  B. universal
  C. intrazone
  D. interzone
  C. intrazone

• Question 124:

  Which update option is not available to administrators?

  A. New Spyware Notifications
  B. New URLs
  C. New Application Signatures
  D. New Malicious Domains
  E. New Antivirus Signatures
  B. New URLs

• Question 125:

  Your company requires positive username attribution of every IP address used by wireless devices to support a new compliance requirement. You must collect IP-to-user mappings as soon as possible with minimal downtime and minimal configuration changes to the wireless devices themselves. The wireless devices are from various manufactures.

  Given the scenario, choose the option for sending IP-to-user mappings to the NGFW.

  A. syslog
  B. RADIUS
  C. UID redistribution
  D. XFF headers
  A. syslog

• Question 126:

  Which Security profile can you apply to protect against malware such as worms and Trojans?

  A. data filtering
  B. antivirus
  C. vulnerability protection
  D. anti-spyware
  B. antivirus

  ---

  Explanation/Reference:

  Reference:

  https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security- profiles#:~:text=Antivirus%20profiles%20protect%20against%20viruses,as%20well%20as%20spyware%20downloads

• Question 127:

  DRAG DROP

  Drag the steps into the correct order to create a static route.

  Select and Place:

  

  Explanation/Reference:

  ---

  

• Question 128:

  Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

  

  A. The web session was unsuccessfully decrypted.
  B. The traffic was denied by security profile.
  C. The traffic was denied by URL filtering.
  D. The web session was decrypted.
  B. The traffic was denied by security profile.
  D. The web session was decrypted.

  ---

  Explanation/Reference:

• Question 129:

  A company moved its old port-based firewall to a new Palo Alto Networks NGFW 60 days ago. Which utility should the company use to identify out-of-date or unused rules on the firewall?

  A. Rule Usage Filter > No App Specified
  B. Rule Usage Filter >Hit Count > Unused in 30 days
  C. Rule Usage Filter > Unused Apps
  D. Rule Usage Filter > Hit Count > Unused in 90 days
  D. Rule Usage Filter > Hit Count > Unused in 90 days

• Question 130:

  Based on the screenshot what is the purpose of the group in User labelled ''it"?

  

  A. Allows users to access IT applications on all ports
  B. Allows users in group "DMZ" lo access IT applications
  C. Allows "any" users to access servers in the DMZ zone
  D. Allows users in group "it" to access IT applications
  D. Allows users in group "it" to access IT applications