Practice PCNSA Exam Online

Question 1

A network administrator created an intrazone Security policy rule on the firewall. The source zones were set to IT. Finance, and HR.

Which two types of traffic will the rule apply to? (Choose two)

A : traffic between zone IT and zone Finance

B : traffic between zone Finance and zone HR

C : traffic within zone IT

D : traffic within zone HR

Answer: C,D

Question 2

An administrator manages a network with 300 addresses that require translation. The administrator configured NAT with an address pool of 240 addresses and found that connections from addresses that needed new translations were being dropped.

Which type of NAT was configured?

A : Dynamic IP

B : Static IP

C : Dynamic IP and Port

D : Destination NAT

Answer: C

Question 3

In the example security policy shown, which two websites fcked? (Choose two.)

A : LinkedIn

B : Facebook

C : YouTube

D : Amazon

Answer: A,B

Question 4

A company moved its old port-based firewall to a new Palo Alto Networks NGFW 60 days ago. Which utility should the company use to identify out-of-date or unused rules on the firewall?

A : Rule Usage Filter > No App Specified

B : Rule Usage Filter >Hit Count > Unused in 30 days

C : Rule Usage Filter > Unused Apps

D : Rule Usage Filter > Hit Count > Unused in 90 days

Answer: D

Question 5

You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?

A : Admin Role profile

B : virtual router

C : DNS proxy

D : service route

Answer: C

Name:	Palo Alto Networks Certified Network Security Administrator
Exam Code:	PCNSA
Certification:	Palo Alto Networks Certified Network Security Administrator
Vendor:	Palo Alto Networks
Total Questions:	450
Last Updated:	Apr 22, 2024

Palo Alto Networks PCNSA