Ask Question
Palo Alto Networks PCNSA Practice Test - Questions Answers
Question list
List of questions
Related questions
Question 1
Which firewall plane provides configuration, logging, and reporting functions on a separate processor?
Question 2
A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base.
On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.
Based on the information, how is the SuperApp traffic affected after the 30 days have passed?
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/manage-new-app-idsintroduced-in-content-releases/review-new-app-id-impact-on-existing-policy-rules
Question 3
How many zones can an interface be assigned with a Palo Alto Networks firewall?
Explanation:
References:
Question 4
Which two configuration settings shown are not the default? (Choose two.)
Explanation:
References:
Question 5
Which data-plane processor layer of the graphic shown provides uniform matching for spyware and vulnerability exploits on a Palo Alto Networks Firewall?
Question 6
Which option lists the attributes that are selectable when setting up an Application filters?
Explanation:
Reference:
https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-web-interface-help/objects/objectsapplication-filters
Question 7
Actions can be set for which two items in a URL filtering security profile? (Choose two.)
Explanation:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/url-filtering-concepts/urlfiltering-profile-actions
Question 8
Which two statements are correct about App-ID content updates? (Choose two.)
Question 9
Which User-ID mapping method should be used for an environment with clients that do not authenticate to Windows Active Directory?
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/user-id/map-ip-addresses-tousers/map-ip-addresses-to-usernames-using-captive-portal.html
Question 10
An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?
Explanation:
An application filter is an object that dynamically groups applications based on application attributes that you define, including category, subcategory, technology, risk factor, and characteristic. This is useful when you want to safely enable access to applications that you do not explicitly sanction, but that you want users to be able to access. For example, you may want to enable employees to choose their own office programs (such as Evernote, Google Docs, or Microsoft
Office 365) for business use.
To safely enable these types of applications, you could create an application filter that matches on the Category business-systems and the Subcategory office-programs. As new applications office programs emerge and new App-IDs get created, these new applications will automatically match the filter you defined; you will not have to make any additional changes to your policy rulebase to safely enable any application that matches the attributes you defined for the filter.
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/use-application-objects-in -policy/create-an-application-filter.html
Question