Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 321:

  What are three valid information sources that can be used when tagging users to dynamic user groups? (Choose three.)

  A. Blometric scanning results from iOS devices
  B. Firewall logs
  C. Custom API scripts
  D. Security Information and Event Management Systems (SIEMS), such as Splun
  E. DNS Security service
  B. Firewall logs
  C. Custom API scripts
  D. Security Information and Event Management Systems (SIEMS), such as Splun

  ---

  Explanation/Reference:

  https://docs.paloaltonetworks.com/best-practices/10-1/user-id-best-practices/user-id-best-practices/user-id-best-practices-for-dynamic-user-groups

• Question 322:

  Selecting the option to revert firewall changes will replace what settings?

  A. the running configuration with settings from the candidate configuration
  B. the device state with settings from another configuration
  C. the candidate configuration with settings from the running configuration
  D. dynamic update scheduler settings
  C. the candidate configuration with settings from the running configuration

• Question 323:

  A coworker found a USB labeled "confidential in the parking lot. They inserted the drive and it infected their corporate laptop with unknown malware The malware caused the laptop to begin infiltrating corporate data.

  Which Security Profile feature could have been used to detect the malware on the laptop?

  A. DNS Sinkhole
  B. WildFire Analysis
  C. Antivirus
  D. DoS Protection
  A. DNS Sinkhole

  ---

  Explanation/Reference:

  The PA AV isnt running on the endpoint. Malware is delivered via USB. S, now only DNS sinkhole can get info about infected endpoints.https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/use-dns-queries-toidentify-infected-hosts-on-the-network/dns-sinkholing.

• Question 324:

  Which action column is available to edit in the Action tab of an Antivirus security profile?

  A. Virus
  B. Signature
  C. Spyware
  D. Trojan
  B. Signature

  ---

  Explanation/Reference:

• Question 325:

  What are the two main reasons a custom application is created? (Choose two.)

  A. To change the default categorization of an application
  B. To visually group similar applications
  C. To correctly identify an internal application in the traffic log
  D. To reduce unidentified traffic on a network
  C. To correctly identify an internal application in the traffic log
  D. To reduce unidentified traffic on a network

  ---

  Explanation/Reference:

• Question 326:

  Which option is part of the content inspection process?

  A. IPsec tunnel encryption
  B. Packet egress process
  C. SSL Proxy re-encrypt
  D. Packet forwarding process
  C. SSL Proxy re-encrypt

• Question 327:

  An administrator is reviewing the Security policy rules shown in the screenshot below. Which statement is correct about the information displayed?

  

  A. Eleven rules use the "Infrastructure* tag.
  B. The view Rulebase as Groups is checked.
  C. There are seven Security policy rules on this firewall.
  D. Highlight Unused Rules is checked.
  B. The view Rulebase as Groups is checked.

  ---

  Explanation/Reference:

• Question 328:

  An administrator is trying to understand which NAT policy is being matched. In what order does the firewall evaluate NAT policies?

  A. Dynamic IP and Port first, then Static, and finally Dynamic IP
  B. From top to bottom
  C. Static NAT rules first, then lop down
  D. Static NAT rules first, then Dynamic
  B. From top to bottom

• Question 329:

  Which definition describes the guiding principle of the zero-trust architecture?

  A. never trust, never connect
  B. always connect and verify
  C. never trust, always verify
  D. trust, but verity
  C. never trust, always verify

  ---

  Explanation/Reference:

  Reference: https://www.paloaltonetworks.com/cyberpedia/what-is-a-zero-trust-architecture

• Question 330:

  Which type of security policy rule will match traffic that flows between the Outside zone and inside zone, but would not match traffic that flows within the zones?

  A. global
  B. intrazone
  C. interzone
  D. universal
  C. interzone

  ---

  Explanation/Reference:

  Reference:

  https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/software-and-content- updates/dynamic-contentupdates.html#:~:text=WildFire%20signature%20updates%20are%20made,within% 20a%20minute%20of %