Palo Alto Networks Certified Network Security Administrator407 questions across 41 pages are complete and free, with no account or card.
407 questions in this bank
Free access · progress saved on this device
Which path in PAN-OS 10.2 is used to schedule a content update to managed devices using Panorama?
Answer: A
A. Panorama > Device Deployment > Dynamic Updates > Schedules > Add This path allows you to schedule updates for your managed devices
Source: Adapted from community discussion — cjace
In which threat profile object would you configure the DNS Security service?
Answer: B
Which rule type is appropriate for matching traffic occurring within a specified zone?
Answer: C
Which two matching criteria are used when creating a Security policy involving NAT? (Choose two.)
Answer: AD
I know that we have had "Pre-NAT IP, Post-NAT zone" drummed into our heads. But...the question is asking, which two "MATCHING CRITERIA" are used when creating a Security policy involving NAT. Go into the WebUI and look for yourself! Only zones are required. NOT addresses! Remember, these exams are as much "reading comprehension" as they are technical knowledge...it's C and D!
Source: Adapted from community discussion — NorthIdaho
A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base. On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days. Based on the information, how is the SuperApp traffic affected after the 30 days have passed?
Answer: A
The correct answer is: A. All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application
Source: Adapted from community discussion — rebet
Which license must an Administrator acquire prior to downloading Antivirus Updates for use with the firewall?
Answer: A
If a universal security rule was created for source zones A & B and destination zones A & B, to which traffic would the rule apply?
Answer: C
Actually none of the option is correct. With this type of config, the right answer is traffic within and between the zones are policed.
Source: Adapted from community discussion — OhEmGee
Which interface type requires no routing or switching but applies Security or NAT policy rules before passing allowed traffic?
What is a valid Security Zone type in PAN-OS?
Answer: D
An administrator is creating a Security policy rule and sees that the destination zone is grayed out. While creating the rule, which option was selected to cause this?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSA practice, question 211. 407 questions available.
Version 1.0.0. How we source questions