Palo Alto Networks Certified Network Security Administrator407 questions across 41 pages are complete and free, with no account or card.
407 questions in this bank
Free access · progress saved on this device
How would a Security policy need to be written to allow outbound traffic using Secure Shell (SSH) to destination ports tcp/22 and tcp/4422?
Answer: C
If you are specifying the service (ports) then all previous actions will need to match. in your case if you choose B only SSH over port 4422 would be allowed you cannot add application-default to the service when ports a specified
Source: Adapted from community discussion — LetsDiscuss23
Which type of DNS signatures are used by the firewall to identify malicious and command-and-control domains?
Which Security policy action will message a user's browser that their web session has been terminated?
Answer: A
The correct answer to the question "Which Security policy action will message a user's browser that their web session has been terminated?" is A. Reset client. This option is chosen because sending a reset only to the client ensures that internal hosts receive a notification that the session was reset, and the browser is not left in a pending state. This action allows the application to close the established session, while the remote server remains unaware. This is particularly useful in situations where a web session needs to be terminated immediately, such as when a user accesses a malicious or unauthorized website or when there is a violation of a security policy rule
Source: Adapted from community discussion — Reliic
In order to protect users against exploit kits that exploit a vulnerability and then automatically download malicious payloads, which Security profile should be configured?
Answer: C
Which verdict may be assigned to a WildFire sample?
Answer: A
A & D seem to be correct: The verdict element value can be one of the following: 0—benign 1—malware 2—grayware 4—phishing
Source: Adapted from community discussion — SillyGoose123
To protect against illegal code execution, which Security profile should be applied?
Answer: C
Answer is C, you do not create security profiles on Denied Rules. Having security profiles on denied rules will just eat up CPU. It is not needed and there is no benefits
Source: Adapted from community discussion — LetsDiscuss23
Which three types of entries can be excluded from an external dynamic list? (Choose three.)
Answer: ADE
A. IP addresses D. Domains E. URLs An external dynamic list is an address object based on an imported list of IP addresses, URLs, domain names1. As you view the entries of an external dynamic list, you can exclude up to 100 entries from the list23. Please note that the other options (B. Applications and C. User-ID) are not types of entries that can be excluded from an external dynamic list
Source: Adapted from community discussion — cjace
Within a WildFire Analysis Profile, what match criteria can be defined to forward samples for analysis?
Answer: C
To use Active Directory to authenticate administrators, which server profile is required in the authentication profile?
Answer: C
By default, which action is assigned to the intrazone-default rule?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSA practice, question 241. 407 questions available.
Version 1.0.0. How we source questions