Palo Alto Networks Certified Network Security Administrator (PCNSA) Free Practice Test
Question 1
Which setting is available to edit when a tag is created on the local firewall?
Correct Answer: B
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 2
Which interface type is part of a Layer 3 zone with a Palo Alto Networks firewall?
Correct Answer: A
Question 3
The CFO found a USB drive in the parking lot and decide to plug it into their corporate laptop. The USB drive had malware on it that loaded onto their computer and then contacted a known command and control (CnC) server, which ordered the infected machine to begin Exfiltrating data from the laptop.
Which security profile feature could have been used to prevent the communication with the CnC server?
Which security profile feature could have been used to prevent the communication with the CnC server?
Correct Answer: B
Question 4
Which type of security rule will match traffic between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?
Correct Answer: D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 5
In the PAN-OS Web Interface, which is a session distribution method offered under NAT Translated Packet Tab to choose how the firewall assigns sessions?
Correct Answer: B
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 6
When is the content inspection performed in the packet flow process?
Correct Answer: A
Question 7
An administrator notices that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would the administrator need to monitor and block to mitigate the malicious activity?
Correct Answer: A
Question 8
An administrator needs to add capability to perform real-time signature lookups to block or sinkhole all known malware domains.
Which type of single unified engine will get this result?
Which type of single unified engine will get this result?
Correct Answer: B
Question 9
What is an advantage for using application tags?
Correct Answer: C
Question 10
When HTTPS for management and GlobalProtect are enabled on the same interface, which TCP port is used for management access?
Correct Answer: D
Question 11
Which three types of entries can be excluded from an external dynamic list (EDL)? (Choose three.)
Correct Answer: A,C,E
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 12
In which two types of NAT can oversubscription be used? (Choose two.)
Correct Answer: A,D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 13
An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. The interzone-default was never changed from its default configuration.
Why doesn't the administrator see the traffic?
Why doesn't the administrator see the traffic?
Correct Answer: B
Question 14
What must be configured before setting up Credential Phishing Prevention?
Correct Answer: D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 15
The firewall sends employees an application block page when they try to access Youtube.
Which Security policy rule is blocking the youtube application?
Which Security policy rule is blocking the youtube application?
Correct Answer: C