Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 391:

  All users from the internal zone must be allowed only HTTP access to a server in the DMZ zone.

  Complete the empty field in the Security policy using an application object to permit only this type of access. Source Zone: Internal Destination Zone: DMZ Zone Application: __________ Service: application-default Action: allow

  A. Application = "any"
  B. Application = "web-browsing"
  C. Application = "ssl"
  D. Application = "http"
  B. Application = "web-browsing"

  ---

  Explanation/Reference:

  Web browsing is a valid add id while http is not, http is a service and not an app

• Question 392:

  The PowerBall Lottery has reached a high payout amount and a company has decided to help employee morale by allowing employees to check the number, but doesn't want to unblock the gambling URL category. Which two methods will allow the employees to get to the PowerBall Lottery site without the company unlocking the gambling URL category? (Choose two.)

  A. Add all the URLs from the gambling category except powerball.com to the block list and then set the action for the gambling category to allow.
  B. Manually remove powerball.com from the gambling URL category.
  C. Add *.powerball.com to the allow list
  D. Create a custom URL category called PowerBall and add *.powerball.com to the category and set the action to allow.
  C. Add *.powerball.com to the allow list
  D. Create a custom URL category called PowerBall and add *.powerball.com to the category and set the action to allow.

• Question 393:

  Which list of actions properly defines the order of steps needed to add a local database user account and create a new group to which this user will be assigned?

  A. 1. Navigate to Device > Local User Database > Users and click Add. 2. Enter a Name for the user. 3. Enter and Confirm a Password or Hash. 4. Enable the account and click OK. 5. Navigate to Device > Local User Database > User Groups and click Add. 6. Enter a Name for the group. 7. Add the user to the group and click OK.
  B. 1. Navigate to Device > Authentication Profile > Users and click Add. 2. Enter a Name for the user. 3. Enter and Confirm a Password or Hash. 4. Enable the account and click OK. 5. Navigate to Device > Local User Database > User Groups and click Add. 6. Enter a Name for the group. 7. Add the user to the group and click OK.
  C. 1. Navigate to Device > Users and click Add. 2. Enter a Name for the user. 3. Enter and Confirm a Password or Hash. 4. Enable the account and click OK. 5. Navigate to Device > User Groups and click Add. 6. Enter a Name for the group. 7. Add the user to the group and click OK.
  D. 1. Navigate to Device > Admins and click Add. 2. Enter a Name for the user. 3. Enter and Confirm a Password or Hash. 4. Enable the account and click OK. 5. Navigate to Device > User Groups and click Add. 6. Enter a Name for the group. 7. Add the user to the group and click OK.
  A. 1. Navigate to Device > Local User Database > Users and click Add. 2. Enter a Name for the user. 3. Enter and Confirm a Password or Hash. 4. Enable the account and click OK. 5. Navigate to Device > Local User Database > User Groups and click Add. 6. Enter a Name for the group. 7. Add the user to the group and click OK.

• Question 394:

  Which three configuration settings are required on a Palo Alto networks firewall management interface?

  A. default gateway
  B. netmask
  C. IP address
  D. hostname
  E. auto-negotiation
  A. default gateway
  B. netmask
  C. IP address

  ---

  Explanation/Reference:

  Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClN7CAK

• Question 395:

  Which three management interface settings must be configured for functional dynamic updates and administrative access on a Palo Alto Networks firewall? (Choose three.)

  A. NTP
  B. IP address
  C. MTU
  D. DNS server
  E. service routes
  A. NTP
  B. IP address
  D. DNS server

• Question 396:

  Which firewall plane provides configuration, logging, and reporting functions on a separate processor?

  A. control
  B. network processing
  C. data
  D. security processing
  A. control

• Question 397:

  What must be configured for the firewall to access multiple authentication profiles for external services to authenticate a non-local account?

  A. authentication sequence
  B. LDAP server profile
  C. authentication server list
  D. authentication list profile
  A. authentication sequence

• Question 398:

  Given the scenario, which two statements are correct regarding multiple static default routes when they are configured as shown in the image? (Choose two.)

  

  A. Path monitoring does not determine if route is useable
  B. Route with highest metric is actively used
  C. Path monitoring determines if route is useable
  D. Route with lowest metric is actively used
  C. Path monitoring determines if route is useable
  D. Route with lowest metric is actively used

• Question 399:

  What are the two types of Administrator accounts? (Choose two.)

  A. Role Based
  B. Superuser
  C. Dynamic
  D. Local
  A. Role Based
  C. Dynamic

  ---

  Explanation/Reference:

  https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/firewall-administration/manage-firewall-administrators/configure-administrative-accounts-and-authentication/configure-a-firewall-administrator-account

• Question 400:

  Which security profile should be used to classify malicious web content?

  A. URL Filtering
  B. Web Content
  C. Antivirus
  D. Vulnerability Protection
  A. URL Filtering

  ---

  Explanation/Reference: