Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 441:

  Which three Ethernet interface types are configurable on the Palo Alto Networks firewall? (Choose three.)

  A. Static
  B. Tap
  C. Dynamic
  D. Layer 3
  E. Virtual Wire
  B. Tap
  D. Layer 3
  E. Virtual Wire

  ---

  Explanation/Reference:

• Question 442:

  What is a recommended consideration when deploying content updates to the firewall from Panorama?

  A. Before deploying content updates, always check content release version compatibility.
  B. Content updates for firewall A/P HA pairs can only be pushed to the active firewall.
  C. Content updates for firewall A/A HA pairs need a defined master device.
  D. After deploying content updates, perform a commit and push to Panorama.
  D. After deploying content updates, perform a commit and push to Panorama.

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage- licenses-and-updates/deploy-updates-to-firewalls-log-collectors-and-wildfire-appliances- using-panorama/schedule-a-content-update-usingpanorama.html

• Question 443:

  All users from the internal zone must be allowed only Telnet access to a server in the DMZ zone. Complete the two empty fields in the Security Policy rules that permits only this type of access.

  

  Choose two.

  A. Service = "any"
  B. Application = "Telnet"
  C. Service - "application-default"
  D. Application = "any"
  B. Application = "Telnet"
  C. Service - "application-default"