Palo Alto Networks PCNSA Übungsprüfungen
Zuletzt aktualisiert am 16.07.2025- Prüfungscode: PCNSA
- Prüfungsname: Palo Alto Networks Certified Network Security Administrator
- Zertifizierungsanbieter: Palo Alto Networks
- Zuletzt aktualisiert am: 16.07.2025
Why should a company have a File Blocking profile that is attached to a Security policy?
- A . To block uploading and downloading of any type of files
- B . To block uploading and downloading of specific types of files
- C . To detonate files in a sandbox environment
- D . To analyze file types
A Security Profile can block or allow traffic at which point?
- A . after it is matched to a Security policy rule that allows traffic
- B . on either the data plane or the management plane
- C . after it is matched to a Security policy rule that allows or blocks traffic
- D . before it is matched to a Security policy rule
In which profile should you configure the DNS Security feature?
- A . Anti-Spyware Profile
- B . Zone Protection Profile
- C . Antivirus Profile
- D . URL Filtering Profile
Which administrator type utilizes predefined roles for a local administrator account?
- A . Superuser
- B . Role-based
- C . Dynamic
- D . Device administrator
Which Security policy action will message a user’s browser that their web session has been terminated?
- A . Reset client
- B . Deny
- C . Drop
- D . Reset server
Which Security policy match condition would an administrator use to block traffic from IP addresses on the Palo Alto Networks EDL of Known Malicious IP Addresses list?
- A . destination address
- B . source address
- C . destination zone
- D . source zone
Where within the URL Filtering security profile must a user configure the action to prevent credential submissions?
- A . URL Filtering > Categories
- B . URL Filtering > URL Filtering Settings
- C . URL Filtering > Inline Categorization
- D . URL Filtering > HTTP Header Insertion
Ethernet 2/1 has an IP Address of 10.0.1.2 in Zone ‚trust‘ (LAN).
If both interfaces are connected to the same virtual router, which IP address information will an administrator need to enter in the Destination field to access the internet?
- A . 0.0.0.0
- B . 10.0.2.1/32
- C . 10.0.1.254/32
- D . 0.0.0.0/0
When creating an address object, which option is available to select from the Type drop-down menu?
- A . IPv6 Address
- B . IP Netmask
- C . IPv4 Address
- D . IP Address Class
An administrator would like to block access to a web server, while also preserving resources and minimizing half-open sockets.
What are two security policy actions the administrator can select? (Choose two.)
- A . Reset server
- B . Reset both
- C . Drop
- D . Deny