Palo Alto Networks PCNSA Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSA Online Questions & Answers

• Question 81:

  Which statement is true regarding NAT rules?

  A. Static NAT rules have precedence over other forms of NAT.
  B. Translation of the IP address and port occurs before security processing.
  C. NAT rules are processed in order from top to bottom.
  D. Firewall supports NAT on Layer 3 interfaces only.
  C. NAT rules are processed in order from top to bottom.

  ---

  Explanation/Reference:

  https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/nat/nat-policy- rules/nat-policy-overview

• Question 82:

  When creating an Admin Role profile, if no changes are made, which two administrative methods will you have full access to? (Choose two.)

  A. web UI
  B. XML API
  C. command line
  D. RESTAPI
  A. web UI
  D. RESTAPI

• Question 83:

  In which three places on the PAN-OS interface can the application characteristics be found? (Choose three.)

  A. Objects tab > Applications
  B. Objects tab > Application Groups
  C. Objects tab > Application Filters
  D. ACC tab > Global Filters
  E. Policies tab > Security
  A. Objects tab > Applications
  B. Objects tab > Application Groups
  C. Objects tab > Application Filters

  ---

  Explanation/Reference:

• Question 84:

  Selecting the option to revert firewall changes will replace what settings?

  A. The running configuration with settings from the candidate configuration
  B. The candidate configuration with settings from the running configuration
  C. The device state with settings from another configuration
  D. Dynamic update scheduler settings
  A. The running configuration with settings from the candidate configuration

• Question 85:

  How many levels can there be in a device-group hierarchy, below the shared level?

  A. 2
  B. 3
  C. 4
  D. 5
  C. 4

  ---

  Explanation/Reference:

• Question 86:

  If users from the Trusted zone need to allow traffic to an SFTP server in the DMZ zone, how should a Security policy with App-ID be configured?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 87:

  By default, which action is assigned to the interzone-default rule?

  A. Reset-client
  B. Reset-server
  C. Deny
  D. Allow
  C. Deny

• Question 88:

  If a universal security rule was created for source zones A and B and destination zones A and B, to which traffic would the rule apply?

  A. Some traffic between A and B
  B. Some traffic within A
  C. All traffic within zones A and B
  D. Some traffic within B
  C. All traffic within zones A and B

• Question 89:

  In which threat profile object would you configure the DNS Security service?

  A. Antivirus
  B. Anti-Spyware
  C. WildFire
  D. URL Filtering
  B. Anti-Spyware

  ---

  Explanation/Reference:

  https://docs.paloaltonetworks.com/dns-security/administration/configure-dns-security/enable-dns-security#:~:text=To%20enable%20DNS%20Security%2C%20you,to%20a%20security%20policy%20rule.

• Question 90:

  Where within the firewall GUI can an administrator create a local user database?

  A. Device > Local User Database > Guests
  B. Device > Local User Database > End Users
  C. Device > Local User Database > Admins
  D. Device > Local User Database > Users
  D. Device > Local User Database > Users

  ---

  Explanation/Reference: