Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 301:

  Which statement best describes the use of Policy Optimizer?

  A. Policy Optimizer can display which Security policies have not been used in the last 90 days
  B. Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications
  C. Policy Optimizer can add or change a Log Forwarding profile for each Secunty policy selected
  D. Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists Admins can then manually enable policies they want to keep and delete ones they want to remove
  A. Policy Optimizer can display which Security policies have not been used in the last 90 days

  ---

  Explanation/Reference:

  https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-cloud-managed-admin/create-prisma-access-policy/policy-optimizer

• Question 302:

  What is the correct process tor creating a custom URL category?

  A. Objects > Security Profiles > URL Category > Add
  B. Objects > Custom Objects > URL Filtering > Add
  C. Objects > Security Profiles > URL Filtering > Add
  D. Objects > Custom Objects > URL Category > Add
  D. Objects > Custom Objects > URL Category > Add

• Question 303:

  To enable DNS sinkholing, which two addresses should be reserved? (Choose two.)

  A. MAC
  B. IPv6
  C. Email
  D. IPv4
  B. IPv6
  D. IPv4

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/use-dns-queries-to-identify-infected-hosts-on-the-network/configure-dns-sinkholing

• Question 304:

  Which two protocols are available on a Palo Alto Networks Firewall Interface Management Profile? (Choose two.)

  A. HTTPS
  B. RDP
  C. SCP
  D. SSH
  A. HTTPS
  D. SSH

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/configure-interfaces/use-interface-management-profiles-to-restrict-access

• Question 305:

  How frequently can wildfire updates be made available to firewalls?

  A. every 15 minutes
  B. every 30 minutes
  C. every 60 minutes
  D. every 5 minutes
  D. every 5 minutes

• Question 306:

  An administrator is reviewing packet captures to troubleshoot a problem with an application, and they observe TCP resets to the client and the server. Which security policy action causes this?

  A. Drop
  B. Reset server
  C. Reset client
  D. Reset both
  D. Reset both

  ---

  Explanation/Reference:

• Question 307:

  To protect against illegal code execution, which Security profile should be applied?

  A. Antivirus profile on allowed traffic
  B. Antivirus profile on denied traffic
  C. Vulnerability Protection profile on allowed traffic
  D. Vulnerability Protection profile on denied traffic
  C. Vulnerability Protection profile on allowed traffic

  ---

  Explanation/Reference:

• Question 308:

  Which setting is available to edit when a tag is created on the local firewall?

  A. Color
  B. Location
  C. Order
  D. Priority
  A. Color

  ---

  Explanation/Reference:

• Question 309:

  DRAG DROP

  Match the Cyber-Attack Lifecycle stage to its correct description.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 310:

  Which Palo Alto networks security operating platform service protects cloud-based application such as Dropbox and salesforce by monitoring permissions and shared and scanning files for Sensitive information?

  A. Prisma SaaS
  B. AutoFocus
  C. Panorama
  D. GlobalProtect
  A. Prisma SaaS