Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 261:

  What is a function of application tags?

  A. creation of new zones
  B. application prioritization
  C. automated referenced applications in a policy
  D. IP address allocations in DHCP
  C. automated referenced applications in a policy

• Question 262:

  Which policy set should be used to ensure that a policy is applied just before the default security rules?

  A. Shared post-rulebase
  B. Local firewall policy
  C. Parent device-group post-rulebase
  D. Child device-group post-rulebase
  A. Shared post-rulebase

  ---

  Explanation/Reference:

  Order: Shared pre-rules Device group pre-rules Local firewall rules Device group post-rules Shared post-rules Intrazone-default Interzone-default

• Question 263:

  The CFO found a malware infected USB drive in the parking lot, which when inserted infected their corporate laptop the malware contacted a known command-and-control server which exfiltrating corporate data. Which Security profile feature could have been used to prevent the communications with the command-and-control server?

  A. Create a Data Filtering Profile and enable its DNS sinkhole feature.
  B. Create an Antivirus Profile and enable its DNS sinkhole feature.
  C. Create an Anti-Spyware Profile and enable its DNS sinkhole feature.
  D. Create a URL Filtering Profile and block the DNS sinkhole URL category.
  C. Create an Anti-Spyware Profile and enable its DNS sinkhole feature.

• Question 264:

  A network administrator created an intrazone Security policy rule on the firewall. The source zones were set to IT. Finance, and HR. Which two types of traffic will the rule apply to? (Choose two)

  A. traffic between zone IT and zone Finance
  B. traffic between zone Finance and zone HR
  C. traffic within zone IT
  D. traffic within zone HR
  C. traffic within zone IT
  D. traffic within zone HR

  ---

  Explanation/Reference:

  Reference: https://kb.wisc.edu/security/page.php?id=90956

• Question 265:

  Where does a user assign a tag group to a policy rule in the policy creation window?

  A. General tab
  B. Usage tab
  C. Application tab
  D. Actions tab
  A. General tab

  ---

  Explanation/Reference:

• Question 266:

  Which administrator type utilizes predefined roles for a local administrator account?

  A. Superuser
  B. Role-based
  C. Dynamic
  D. Device administrator
  C. Dynamic

• Question 267:

  Which path in PAN-OS 10.2 is used to schedule a content update to managed devices using Panorama?

  A. Panorama > Device Deployment > Dynamic Updates > Schedules > Add
  B. Panorama > Device Deployment > Content Updates > Schedules > Add
  C. Panorama > Dynamic Updates > Device Deployment > Schedules > Add
  D. Panorama > Content Updates > Device Deployment > Schedules > Add
  A. Panorama > Device Deployment > Dynamic Updates > Schedules > Add

  ---

  Explanation/Reference:

  Perform the following steps for each update type you want to schedule.

  Select PanoramaDevice DeploymentDynamic Updates, click Schedules, and Add a schedule.

• Question 268:

  Which interface type can use virtual routers and routing protocols?

  A. Tap
  B. Layer3
  C. Virtual Wire
  D. Layer2
  B. Layer3

• Question 269:

  An administrator has an IP address range in the external dynamic list and wants to create an exception for one specific IP address in this address range. Which steps should the administrator take?

  A. Add the address range to the Manual Exceptions list and exclude the IP address by selecting the entry.
  B. Add each IP address in the range as a list entry and then exclude the IP address by adding it to the Manual Exceptions list.
  C. Select the address range in the List Entries list. A column will open with the IP addresses. Select the entry to exclude.
  D. Add the specific IP address from the address range to the Manual Exceptions list by using regular expressions to define the entry.
  D. Add the specific IP address from the address range to the Manual Exceptions list by using regular expressions to define the entry.

• Question 270:

  

  An administrator is updating Security policy to align with best practices. Which Policy Optimizer feature is shown in the screenshot below?

  A. Rules without App Controls
  B. New App Viewer
  C. Rule Usage
  D. Unused Unused Apps
  A. Rules without App Controls

  ---

  Explanation/Reference: