Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 21:

  For the firewall to use Active Directory to authenticate users, which Server Profile is required in the Authentication Profile?

  A. TACACS+
  B. RADIUS
  C. LDAP
  D. SAML
  C. LDAP

  ---

  https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/authentication/configure-an- authenticationprofile-and-sequence

• Question 22:

  Choose the option that correctly completes this statement. A Security Profile can block or allow traffic ____________.

  A. on either the data place or the management plane.
  B. after it is matched by a security policy rule that allows traffic.
  C. before it is matched to a Security policy rule.
  D. after it is matched by a security policy rule that allows or blocks traffic.
  B. after it is matched by a security policy rule that allows traffic.

  ---

  Explanation/Reference:

  Reference:

  https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-policy.html

  After a packet has been allowed by the Security policy, Security Profiles are used to scan packets for threats, vulnerabilities, viruses, spyware, malicious URLs, data exfiltration, and exploitation software.

• Question 23:

  When an ethernet interface is configured with an IPv4 address, which type of zone is it a member of?

  A. Layer 3
  B. Virtual Wire
  C. Tap
  D. Tunnel
  A. Layer 3

• Question 24:

  An administrator is trying to enforce policy on some (but not all) of the entries in an external dynamic list. What is the maximum number of entries that they can be exclude?

  A. 50
  B. 100
  C. 200
  D. 1,000
  B. 100

• Question 25:

  In order to fulfill the corporate requirement to backup the configuration of Panorama and the Panorama-managed firewalls securely, which protocol should you select when adding a new scheduled config export?

  A. HTTPS
  B. SMB v3
  C. SCP
  D. FTP
  C. SCP

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/panorama-web-interface/panorama-scheduled-config-export

• Question 26:

  Which type of address object is www.paloaltonetworks.com?

  A. IP range
  B. IP netmask
  C. named address
  D. FQDN
  D. FQDN

• Question 27:

  Which parameter is used to view the Security policy rulebase as groups?

  A. Tags
  B. Service
  C. Type
  D. Action
  A. Tags

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/policy/use-tags-to-group-and-visually-distinguish-objects/view-rules-by-tag-group

• Question 28:

  An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. The interzone-default was never changed from its default configuration.

  Why doesn't the administrator see the traffic?

  A. Logging on the interzone-default policy is disabled.
  B. Traffic is being denied on the interzone-default policy.
  C. The Log Forwarding profile is not configured on the policy.
  D. The interzone-default policy is disabled by default.
  A. Logging on the interzone-default policy is disabled.

• Question 29:

  Which action can be set in a URL Filtering Security profile to provide users temporary access to all websites in a given category using a provided password?

  A. exclude
  B. continue
  C. hold
  D. override
  D. override

  ---

  Explanation/Reference:

  The user will see a response page indicating that a password is required to allow access to websites in the given category. With this option, the security administrator or help-desk person would provide a password granting temporary access to all websites in the given category. A log entry is generated in the URL Filtering log. The Override webpage doesn't display properly on client systems configured to use a proxy server.

• Question 30:

  Which license is required to use the Palo Alto Networks built-in IP address EDLs?

  A. DNS Security
  B. Threat Prevention
  C. WildFire
  D. SD-Wan
  B. Threat Prevention

  ---

  Explanation/Reference:

  Reference:

  https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/use-an-external- dynamic-list-in- policy/builtin-edls.html#:~:text=With%20an%