Sign In
Home/Palo Alto/PCNSA/Free questions

PCNSA — Free Practice Questions

10 free sample questions from a bank of 588, with the correct answers and explanations. No signup required — start practising right now.

1DRAG DROP - Match the Palo Alto Networks Security Operating Platform architecture to its description. Select and Place:
PCNSA question 1
    Answer:
    2Which two statements are correct about App-ID content updates? (Choose two.)
    • Updated application content might change how Security policy rules are enforced.
    • After an application content update, new applications must be manually classified prior to use.
    • Existing security policy rules are not affected by application content updates.
    • After an application content update, new applications are automatically identified and classified.
    Answer: A, D
    3Which type of administrator account cannot be used to authenticate user traffic flowing through the firewall's data plane?
    • Kerberos user
    • SAML user
    • local database user
    • local user
    Answer: D
    4How frequently can WildFire updates be made available to firewalls?
    • every 15 minutes
    • every 30 minutes
    • every 60 minutes
    • every 5 minutes
    Answer: D
    5Starting with PAN-OS version 9.1, which new type of object is supported for use within the User field of a Security policy rule?
    • remote username
    • dynamic user group
    • static user group
    • local username
    Answer: B
    6Which link in the web interface enables a security administrator to view the Security policy rules that match new application signatures?
    • Review App Matches
    • Review Apps
    • Pre-analyze
    • Review Policies
    Answer: D
    7Based on the shown security policy, which Security policy rule would match all FTP traffic from the inside zone to the outside zone?
    PCNSA question 7
    • interzone-default
    • internal-inside-dmz
    • inside-portal
    • egress-outside
    Answer: D
    8Which type of firewall configuration contains in-progress configuration changes?
    • backup
    • candidate
    • running
    • committed
    Answer: B
    9Which three configuration settings are required on a Palo Alto Network firewall management interface? (Choose three.)
    • hostname
    • netmask
    • default gateway
    • auto-negotiation
    • IP address
    Answer: B, C, E
    10What is an advantage for using application tags?
    • They are helpful during the creation of new zones.
    • They help content updates automate policy updates.
    • They help with the creation of interfaces.
    • They help with the design of IP address allocations in DHCP.
    Answer: B
    Unlock all 588 questions · $9.99Practice these interactively

    Want the full bank of 588 questions for PCNSA? See all practice exams.