Exit demo PCNSA Palo Alto Networks Certified Network Security Administrator (PCNSA) PDF format · free preview

Palo Alto Networks PCNSA - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/pcnsa.html

Question 1
Single choice

After making multiple changes to the candidate configuration of a firewall, the administrator would like to start over with a candidate configuration that matches the running configuration.

Which command in Device > Setup > Operations would provide the most operationally efficient way to accomplish this?

A.

Import named config snapshot

B.

Load named configuration snapshot

C.

Revert to running configuration

D.

Revert to last saved configuration

Question 2
Multiple choice

Starting with PAN-OS version 9.1, application dependency information is now reported in which two locations? (Choose two.)

A.

on the App Dependency tab in the Commit Statuswindow

B.

on the Policy Optimizer'sRule Usagepage

C.

ontheApplication tab in the Security Policy Rulecreation window

D.

ontheObjects>Applicationsbrowser pages

Question 3
Single choice

What is an advantage for using application tags?

A.

They are helpful during the creation of new zones

B.

They help with the design of IP address allocations in DHCP.

C.

They help content updates automate policy updates

D.

They help with the creation of interfaces

Question 4
Single choice

An administrator wishes to follow best practices for logging traffic that traverses the firewall

Which log setting is correct?

A.

Disable all logging

B.

Enable Log at Session End

C.

Enable Log at Session Start

D.

Enable Log at both Session Start and End

Question 5
Single choice

An address object of type IP Wildcard Mask can be referenced in which part of the configuration?

A.

Security policy rule

B.

ACC global filter

C.

external dynamic list

D.

NAT address pool

Question 6
Single choice

What is a function of application tags?

A.

creation of new zones

B.

application prioritization

C.

automated referenced applications in a policy

D.

IP address allocations in DHCP

Question 7
Multiple choice

Which three types of authentication services can be used to authenticate user traffic flowing through the firewalls data plane? (Choose three )

A.

TACACS

B.

SAML2

C.

SAML10

D.

Kerberos

E.

TACACS+

Question 8
Single choice

An administrator needs to create a Security policy rule that matches DNS traffic within the LAN zone, and also needs to match DNS traffic within the DMZ zone The administrator does not want to allow traffic between the DMZ and LAN zones.

Which Security policy rule type should they use?

A.

default

B.

universal

C.

intrazone

D.

interzone

Question 9
Single choice

An administrator is reviewing another administrator s Security policy log settings.

Which log setting configuration is consistent with best practices tor normal traffic?

A.

Log at Session Start and Log at Session End both enabled

B.

Log at Session Start disabled Log at Session End enabled

C.

Log at Session Start enabled Log at Session End disabled

D.

Log at Session Start and Log at Session End both disabled

Question 10
Single choice

Which type firewall configuration contains in-progress configuration changes?

A.

backup

B.

running

C.

candidate

D.

committed

Showing 10 of 443 questions · Unlock the full set