Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 51:

  According to the best practices for mission critical devices, what is the recommended interval for antivirus updates?

  A. by minute
  B. hourly
  C. daily
  D. weekly
  C. daily

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/threat- prevention/best-practices-for-content-and-threat-content-updates/best-practices-mission- critical.html

• Question 52:

  Prior to a maintenance-window activity, the administrator would like to make a backup of only the running configuration to an external location. What command in Device > Setup > Operations would provide the most operationally efficient way to achieve this outcome?

  A. save named configuration snapshot
  B. export device state
  C. export named configuration snapshot
  D. save candidate config
  A. save named configuration snapshot

  ---

  Explanation/Reference:

  Export Named Configuration Snapshot This option exports the current running configuration, a candidate configuration snapshot, or a previously imported configuration (candidate or running). The firewall exports the configuration as an XML file with the specified name. You can save the snapshot in any network location. These exports often are used as backups. These XML files also can be used as templates for building other firewall configurations.

• Question 53:

  Where in Panorama would Zone Protection profiles be configured?

  A. Templates
  B. Device Groups
  C. Shared
  D. Panorama tab
  A. Templates

  ---

  Explanation/Reference:

  https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-firewalls/use-case-configure-firewalls-using-panorama/set-up-your-centralized-configuration-and-policies/use-templates-to-administer-a-base-configuration

• Question 54:

  You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?

  A. Admin Role profile
  B. virtual router
  C. DNS proxy
  D. service route
  D. service route

  ---

  Explanation/Reference:

• Question 55:

  An administrator needs to allow users to use only certain email applications.

  How should the administrator configure the firewall to restrict users to specific email applications?

  A. Create an application filter and filter it on the collaboration category, email subcategory.
  B. Create an application group and add the email applications to it.
  C. Create an application filter and filter it on the collaboration category.
  D. Create an application group and add the email category to it.
  B. Create an application group and add the email applications to it.

• Question 56:

  Which type of DNS signatures are used by the firewall to identify malicious and command-and-control domains?

  A. DNS Malicious signatures
  B. DNS Security signatures
  C. DNS Malware signatures
  D. DNS Block signatures
  B. DNS Security signatures

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/advanced-threat-prevention/administration/configure-threat-prevention/use-dns-queries-to-identify-infected-hosts-on-the-network#:~:text=The%20firewall%20has%20two%20sources,use%20to% 20identify%20malicious%20domains

• Question 57:

  Which feature dynamically analyzes and detects malicious content by evaluating various web page details using a series of machine learning (ML) models?

  A. Antivirus Inline ML
  B. URL Filtering Inline ML
  C. Anti-Spyware Inline ML
  D. WildFire Inline ML
  B. URL Filtering Inline ML

  ---

  Explanation/Reference:

• Question 58:

  An administrator configured a Security policy rule where the matching condition includes a single application and the action is set to deny. What deny action will the firewall perform?

  A. Drop the traffic silently
  B. Perform the default deny action as defined in the App-ID database for the application
  C. Send a TCP reset packet to the client- and server-side devices
  D. Discard the session's packets and send a TCP reset packet to let the client know the session has been terminated
  B. Perform the default deny action as defined in the App-ID database for the application

  ---

  Explanation/Reference:

• Question 59:

  Which three filter columns are available when setting up an Application Filter? (Choose three.)

  A. Parent App
  B. Category
  C. Risk
  D. Standard Ports
  E. Subcategory
  B. Category
  C. Risk
  E. Subcategory

  ---

  Explanation/Reference:

  Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClXfCAK

• Question 60:

  During the packet flow process, which two processes are performed in application identification? (Choose two.)

  A. pattern based application identification
  B. application override policy match
  C. session application identified
  D. application changed from content inspection
  A. pattern based application identification
  B. application override policy match

  ---

  Explanation/Reference:

  Reference: http://live.paloaltonetworks.com//t5/image/serverpage/image- id/12862i950F549C7D4E6309