Palo Alto Networks PCNSA Palo Alto Networks Certified Network Security Administrator Online Training
Palo Alto Networks PCNSA Online Training
The questions for PCNSA were last updated at Nov 23,2024.
- Exam Code: PCNSA
- Exam Name: Palo Alto Networks Certified Network Security Administrator
- Certification Provider: Palo Alto Networks
- Latest update: Nov 23,2024
What is the maximum volume of concurrent administrative account sessions?
- A . 2
- B . Unlimited
- C . 10
- D . 1
What are two predefined AntiSpyware profiles? (Choose two.)
- A . Default
- B . Standard
- C . Secure
- D . Strict
Where within the firewall GUI can all existing tags be viewed?
- A . Policies > Tags
- B . Network > Tags
- C . Objects > Tags
- D . Monitor > Tags
Where within the firewall GUI can all existing tags be viewed?
- A . Policies > Tags
- B . Network > Tags
- C . Objects > Tags
- D . Monitor > Tags
Which five Zero Trust concepts does a Palo Alto Networks firewall apply to achieve an integrated approach to prevent threats? (Choose five.)
- A . User identification
- B . Filtration protection
- C . Vulnerability protection
- D . Antivirus
- E . Application identification
- F . Anti-spyware
When is the content inspection performed in the packet flow process?
- A . after the application has been identified
- B . after the SSL Proxy re-encrypts the packet
- C . before the packet forwarding process
- D . before session lookup
A
Explanation:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVHCA0
To enable DNS sinkholing, which two addresses should be reserved? (Choose two.)
- A . MAC
- B . IPv6
- C . Email
- D . IPv4
BD
Explanation:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGECA0
An administrator would like to apply a more restrictive Security profile to traffic for file sharing applications. The administrator does not want to update the Security policy or object when new applications are released.
Which object should the administrator use as a match condition in the Security policy?
- A . the Content Delivery Networks URL category
- B . the Online Storage and Backup URL category
- C . an application group containing all of the file-sharing App-IDs reported in the traffic logs
- D . an application filter for applications whose subcategory is file-sharing
An administrator is reviewing the Security policy rules shown in the screenshot below.
Which statement is correct about the information displayed?
- A . Eleven rules use the "Infrastructure* tag.
- B . The view Rulebase as Groups is checked.
- C . There are seven Security policy rules on this firewall.
- D . Highlight Unused Rules is checked.
Given the screenshot, what two types of route is the administrator configuring? (Choose two.)
- A . BGP
- B . static route
- C . default route
- D . OSPF