PCNSA by Palo Alto Networks Valid Free Exam Practice Test

Question 1

Review the Screenshot:

Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the SERVER zone to the DMZ on SSH only.
Which rule group enables the required traffic?

A.

B.

C.

D.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

Which statement is true about Panorama managed devices?

A. Local configuration locks can be manually unlocked from Panorama B. Panorama automatically removes local configuration locks after a commit from Panorama C. Local configuration locks prohibit Security policy changes for a Panorama managed device D. Security policy rules configured on local firewalls always take precedence

Correct Answer: A

Question 3

An administrator configured a Security policy rule where the matching condition includes a single application and the action is set to deny. What deny action will the firewall perform?

A. Drop the traffic silently B. Send a TCP reset packet to the client- and server-side devices C. Perform the default deny action as defined in the App-ID database for the application D. Discard the session's packets and send a TCP reset packet to let the client know the session has been terminated

Correct Answer: D

Question 4

Match each feature to the DoS Protection Policy or the DoS Protection Profile.

Correct Answer:

Question 5

Where within the URL Filtering security profile must a user configure the action to prevent credential submissions?

A. URL Filtering > Categories B. URL Filtering > HTTP Header Insertion C. URL Filtering > URL Filtering Settings D. URL Filtering > Inline Categorization

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

Which stage of the cyber-attack lifecycle makes it important to provide ongoing education to users on spear phishing links, unknown emails, and risky websites?

A. delivery B. installation C. exploitation D. reconnaissance

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 7

Which three configuration settings are required on a Palo Alto networks firewall management interface?

A. IP address B. auto-negotiation C. hostname D. netmask E. default gateway

Correct Answer: A,D,E

Question 8

An administrator needs to allow users to use only certain email applications.
How should the administrator configure the firewall to restrict users to specific email applications?

A. Create an application filter and filter it on the collaboration category, email subcategory. B. Create an application group and add the email category to it. C. Create an application filter and filter it on the collaboration category. D. Create an application group and add the email applications to it.

Correct Answer: D

Palo Alto Networks Certified Network Security Administrator - PCNSA Exam Practice Test