Palo Alto Networks Palo Alto Networks Certifications PCNSA Questions & Answers

• Question 21:

  Which User Credential Detection method should be applied within a URL Filtering Security profile to check for the submission of a valid corporate username and the associated password?

  A. Group Mapping

  B. Domain Credential

  C. Valid Username Detected Log Severity

  D. IP User

  Correct Answer: B

• Question 22:

  Where within the firewall GUI can an administrator create a local user database?

  A. Device > Local User Database > Guests

  B. Device > Local User Database > End Users

  C. Device > Local User Database > Admins

  D. Device > Local User Database > Users

  Correct Answer: D

• Question 23:

  How are service routes used in PAN-OS?

  A. By the OSPF protocol, as part of Dijkstra's algorithm, to give access to the various services offered in the network

  B. To statically route subnets so they are joinable from, and have access to, the Palo Alto Networks external services

  C. For routing, because they are the shortest path selected by the BGP routing protocol

  D. To route management plane services through data interfaces rather than the management interface

  Correct Answer: D

• Question 24:

  In which section of the PAN-OS GUI does an administrator configure URL Filtering profiles?

  A. Network

  B. Policies

  C. Objects

  D. Device

  Correct Answer: C

  Reference: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/objects/objects-security-profiles-url-filtering

• Question 25:

  Which profile should be used to obtain a verdict regarding analyzed files?

  A. Advanced threat prevention

  B. Vulnerability profile

  C. WildFire analysis

  D. Content-ID

  Correct Answer: C

  WildFire Analysis Profiles Use a WildFire Analysis profile to enable the firewall to forward unknown files or email links for WildFire analysis. Specify files to be forwarded for analysis based on application, file type, and transmission direction (upload or download). Files or email links matched to the profile rule are forwarded to either the WildFire public cloud or the WildFire private cloud (hosted with a WF-500 appliance), depending on the analysis location defined for the rule. If a profile rule is set to forward files to the WildFire public cloud, the firewall also forwards files that match existing antivirus signatures, in addition to unknown files.

• Question 26:

  In which two Security Profiles can an action equal to the block IP feature be configured? (Choose two.)

  A. Antivirus

  B. URL Filtering

  C. Vulnerability Protection

  D. Anti-spyware

  Correct Answer: CD

• Question 27:

  When is an event displayed under threat logs?

  A. When traffic matches a corresponding Security Profile

  B. When traffic matches any Security policy

  C. Every time a session is blocked

  D. Every time the firewall drops a connection

  Correct Answer: A

• Question 28:

  Which two actions are needed for an administrator to get real-time WildFire signatures? (Choose two.)

  A. Enable Dynamic Updates.

  B. Obtain a Threat Prevention subscription.

  C. Obtain a WildFire subscription.

  D. Move within the WildFire public cloud region.

  Correct Answer: AC

• Question 29:

  Which two features implement one-to-one translation of a source IP address while allowing the source port to change? (Choose two.)

  A. Dynamic IP

  B. Dynamic IP and Port (DIPP)

  C. Static IP

  D. Dynamic IP / Port Fallback

  Correct Answer: BD

• Question 30:

  What are three ways application characteristics are used? (Choose three.)

  A. As a setting to define a new custom application

  B. As a global filter in the Application Command Center (ACC)

  C. As an attribute to define an application group

  D. As an object to define Security policies

  E. As an attribute to define an application filter

  Correct Answer: ABE