Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 191:

  Which type of administrative role must you assign to a firewall administrator account, if the account must include a custom set of firewall permissions?

  A. SAML
  B. Multi-Factor Authentication
  C. Role-based
  D. Dynamic
  C. Role-based

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/firewall- administration/manage-firewall-administrators/administrative-role-types.html

• Question 192:

  Which component is a building block in a Security policy rule?

  A. decryption profile
  B. destination interface
  C. timeout (min)
  D. application
  D. application

  ---

  Explanation/Reference:

  Reference:

  https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-web-interface-help/policies/policies- security/buildingblocks-in-a-security-policy-rule.html

• Question 193:

  Access to which feature requires a URL Filtering license?

  A. PAN-DB database
  B. External dynamic lists
  C. DNS Security
  D. Custom URL categories
  A. PAN-DB database

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/getting-started/activate-licenses-and-subscriptions.html

• Question 194:

  Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.

  

  A. Exploitation
  B. Installation
  C. Reconnaissance
  D. Act on Objective
  A. Exploitation

• Question 195:

  DRAG DROP

  Place the steps in the correct packet-processing order of operations.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVHCA0

• Question 196:

  Why should a company have a File Blocking profile that is attached to a Security policy?

  A. To block uploading and downloading of specific types of files
  B. To detonate files in a sandbox environment
  C. To analyze file types
  D. To block uploading and downloading of any type of files
  A. To block uploading and downloading of specific types of files

• Question 197:

  An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. The interzone-default was never changed from its default configuration. Why doesn't the administrator see the traffic?

  A. Traffic is being denied on the interzone-default policy.
  B. The Log Forwarding profile is not configured on the policy.
  C. The interzone-default policy is disabled by default
  D. Logging on the interzone-default policy is disabled
  D. Logging on the interzone-default policy is disabled

• Question 198:

  What are the two ways to implement an exception to an external dynamic list? (Choose two.)

  A. Edit the external dynamic list by removing the entries to exclude.
  B. Select the entries to exclude from the List Entries list.
  C. Manually add an entry to the Manual Exceptions list.
  D. Edit the external dynamic list by adding the “-“ symbol before the entries to exclude.
  B. Select the entries to exclude from the List Entries list.
  C. Manually add an entry to the Manual Exceptions list.

  ---

  Explanation/Reference:

• Question 199:

  DNS exceptions can be set under which Security profile?

  A. Data Filtering
  B. URL Filtering
  C. Anti-Spyware
  D. Antivirus
  C. Anti-Spyware

• Question 200:

  You need to allow users to access the office-suite application of their choice. How should you configure the firewall to allow access to any office-suite application?

  A. Create an Application Group and add Office 365, Evernote Google Docs and Libre Office
  B. Create an Application Group and add business-systems to it.
  C. Create an Application Filter and name it Office Programs, then filter it on the office programs subcategory.
  D. Create an Application Filter and name it Office Programs then filter on the business- systems category.
  C. Create an Application Filter and name it Office Programs, then filter it on the office programs subcategory.