DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Palo Alto PCNSA Exam Questions and Practice Test

Exam NameNetwork Security Administrator
Exam NumberPCNSA PAN‐OS 10
Exam Price$155 USD
Duration80 minutes
Number of Questions50-60
Passing ScoreVariable (70-80 / 100 Approx.)

Prepare for the Palo Alto Network Security Administrator exam with this collection of practice questions and answers. Test your skills with realistic PCNSA sample questions.

Take other online exams

Question #1
What are three Palo Alto Networks best practices when implementing the DNS Security Service? (Choose three.)
A. onfigure a URL Filtering profile
B. ely on a DNS resolver
C. mplement a threat intel program
D. lan for mobile-employee risk
E. rain your staff to be security aware
View answer
Correct Answer: ABC
Question #2
What does an application filter help you to do?
A. t dynamically provides application statistics based on network, threat, and blocked activity
B. t dynamically shapes defined application traffic based on active sessions and bandwidth usage
C. t dynamically groups applications based on application attributes such as category and subcategory
D. t dynamically filters applications based on critical, high, medium, low, or informational severity
View answer
Correct Answer: C
Question #3
What are the requirements for using Palo Alto Networks EDL Hosting Service?
A. n additional subscription free of charge
B. n additional paid subscription
C. ny supported Palo Alto Networks firewall or Prisma Access firewall
D. firewall device running with a minimum version of PAN-OS 10
View answer
Correct Answer: B
Question #4
An administrator would like to block access to a web server, while also preserving resources and minimizing half-open sockets. What are two security policy actions the administrator can select? (Choose two.)
A. eny
B. eset server
C. eset both
D. rop
View answer
Correct Answer: BD
Question #5
Which action can be set in a URL Filtering Security profile to provide users temporary access to all websites in a given category using a provided password?
A. verride
B. xclude
C. ontinue
D. old
View answer
Correct Answer: A
Question #6
An administrator wants to create a NAT policy to allow multiple source IP addresses to be translated to the same public IP address. What is the most appropriate NAT policy to achieve this?
A. ynamic IP and Port
B. estination
C. tatic IP
D. ynamic IP
View answer
Correct Answer: C
Question #7
DNS exceptions can be set under which Security profile?
A. ata Filtering
B. nti-Spyware
C. ntivirus
D. RL Filtering
View answer
Correct Answer: B
Question #8
lf the firewall interface E1/1 is connected to a SPAN or mirror port, which interface type should E1/1 be configured as?
A. ap
B. ayer 2
C. irtual Wire
D. ayer 3
View answer
Correct Answer: A
Question #9
Where within the firewall GUI can all existing tags be viewed?
A. etwork > Tags
B. bjects > Tags
C. olicies > Tags
D. onitor > Tags
View answer
Correct Answer: B
Question #10
What are the two ways to implement an exception to an external dynamic list? (Choose two.)
A. dit the external dynamic list by removing the entries to exclude
B. dit the external dynamic list by adding the "-" symbol before the entries to exclude
C. anually add an entry to the Manual Exceptions list
D. elect the entries to exclude from the List Entries list
View answer
Correct Answer: CD

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number: