Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 291:

  Which type of policy allows an administrator to both enforce rules and take action?

  A. Authentication
  B. Security
  C. NAT
  D. Decryption
  B. Security

  ---

  Explanation/Reference:

• Question 292:

  Which path in PAN-OS 10.0 displays the list of port-based security policy rules?

  A. Policies> Security> Rule Usage> No App Specified
  B. Policies> Security> Rule Usage> Port only specified
  C. Policies> Security> Rule Usage> Port-based Rules
  D. Policies> Security> Rule Usage> Unused Apps
  A. Policies> Security> Rule Usage> No App Specified

  ---

  Explanation/Reference:

  https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/security- policy-rule-optimization/migrate-port-based-to-app-id-based-security-policy-rules.html

• Question 293:

  What is the minimum timeframe that can be set on the firewall to check for new WildFire signatures?

  A. every 30 minutes
  B. every 5 minutes
  C. once every 24 hours
  D. every 1 minute
  D. every 1 minute

• Question 294:

  Which path is used to save and load a configuration with a Palo Alto Networks firewall?

  A. Device>Setup>Services
  B. Device>Setup>Management
  C. Device>Setup>Operations
  D. Device>Setup>Interfaces
  C. Device>Setup>Operations

• Question 295:

  Given the cyber-attack lifecycle diagram identify the stage in which the attacker can run malicious code against a vulnerability in a targeted machine.

  

  A. Exploitation
  B. Installation
  C. Reconnaissance
  D. Act on the Objective
  A. Exploitation

• Question 296:

  What are the three DNS Security categories available to control DNS traffic? (Choose three.)

  A. Parked Domains
  B. Spyware Domains
  C. Vulnerability Domains
  D. Phishing Domains
  E. Malware Domains
  A. Parked Domains
  D. Phishing Domains
  E. Malware Domains

  ---

  Explanation/Reference:

  https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/threat-prevention/dns-security/enable-dns-security Malware—test-malware.testpanw.com Phishing—test-phishing.testpanw.com Parked—test-parked.testpanw.com

• Question 297:

  Which statement is true about Panorama managed devices?

  A. Panorama automatically removes local configuration locks after a commit from Panorama
  B. Local configuration locks prohibit Security policy changes for a Panorama managed device
  C. Security policy rules configured on local firewalls always take precedence
  D. Local configuration locks can be manually unlocked from Panorama
  B. Local configuration locks prohibit Security policy changes for a Panorama managed device

  ---

  Explanation/Reference:

• Question 298:

  To use Active Directory to authenticate administrators, which server profile is required in the authentication profile?

  A. domain controller
  B. TACACS+
  C. LDAP
  D. RADIUS
  C. LDAP

• Question 299:

  What are two valid selections within a Vulnerability Protection profile? (Choose two.)

  A. deny
  B. drop
  C. default
  D. sinkhole
  B. drop
  C. default

• Question 300:

  What is considered best practice with regards to committing configuration changes?

  A. Wait until all running and pending jobs are finished before committing.
  B. Export configuration after each single configuration change performed.
  C. Validate configuration changes prior to committing.
  D. Disable the automatic commit feature that prioritizes content database installations before committing.
  C. Validate configuration changes prior to committing.

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-cli-quick-start/use-the-cli/commit-configuration-changes