Palo Alto Networks Certified Network Security Administrator407 questions across 41 pages are complete and free, with no account or card.
407 questions in this bank
Free access · progress saved on this device
How often does WildFire release dynamic updates?
Answer: A
Reference: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-new-features/wildfire-features/five-minute-wildfire-updates
Source: Adapted from community discussion — yurakoresh
What is the minimum frequency for which you can configure the firewall to check for new WildFire antivirus signatures?
Answer: D
Your company has 10 Active Directory domain controllers spread across multiple WAN links. All users authenticate to Active Directory. Each link has substantial network bandwidth to support all mission-critical applications. The firewall's management plane is highly utilized. Given the scenario, which type of User-ID agent is considered a best practice by Palo Alto Networks?
Answer: A
Although, the Windows-based agent and the PAN-OS integrated agent perform the same basic tasks, they use different underlying communication protocols. This difference makes each agent more appropriate for different environments. The Windows-based agent uses MS-RPC, which requires the full Windows Security logs to be sent to the agent, where they are filtered for the relevant User-ID information. The PAN-OS integrated agent uses either the Windows Management Instrumentation, of WMI, or the Windows Remote Management Protocol, or WinRM which enables the agent to retrieve only the User-ID information from the Windows Security logs. The result is that, in an infrastructure with remote networks separated with WAN links, the integrated agent is more appropriate for reading remote logs and the Windows-based agent is more appropriate for reading local logs.However, uses of the integrated agent is not without cost: it consumes more of the firewall’s management plane resources. For this reason, deployment of the Windows agent at remote sites and having them forward the relevant User-ID information to firewall on a central network often is beneficial.
Source: Adapted from community discussion — Rowdy_47
DRAG DROP - Arrange the correct order that the URL classifications are processed within the system. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
My mnemonic (?) is "inside, outside". Block inside firewall, allow out the firewall, Cust URL in the firewall, ExternalDL outside, PAN-DB inside, Download PAN-DB from outside.
Source: Adapted from community discussion — Flixis
Which dataplane layer of the graphic shown provides pattern protection for spyware and vulnerability exploits on a Palo Alto Networks Firewall?
Answer: A
Palo Alto Networks regularly updates its threats and application databases. Updates include new antivirus and spyware definitions, new malicious domains and URLs, and new application signatures.
Source: Adapted from community discussion — mr_flubber
What must you configure to enable the firewall to access multiple Authentication Profiles to authenticate a non-local account?
Answer: A
If you have configured an authentication sequence, the firewall checks against each profile in sequence until one profile successfully authenticates the user. [Palo Alto Networks]
Source: Adapted from community discussion — BeforeScope
Which Security Profile mitigates attacks based on packet count?
Answer: A
Out of the choices A is the obvious answer however the question is "borked" Objects>Security profiles>Dos Protection Network>Network profiles>Zone protection
Source: Adapted from community discussion — Blender808
Which interface type uses virtual routers and routing protocols?
Answer: B
Which URL Filtering Profile action does not generate a log entry when a user attempts to access a URL?
Answer: B
I wanted to update the url for the source of the answer: https://docs.paloaltonetworks.com/advanced-url-filtering/administration/url-filtering-basics/url-filtering-profiles " allow: The website is allowed and no log entry is generated. NOTE: Don’t set allow as the Action for categories of traffic you don’t block because you lose visibility into traffic you don’t log. Instead, set alert as the Action for categories of traffic you don’t block to log and provide visibility into the traffic. "
Source: Adapted from community discussion — [Removed]
An internal host needs to connect through the firewall using source NAT to servers of the internet. Which policy is required to enable source NAT on the firewall?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSA practice, question 361. 407 questions available.
Version 1.0.0. How we source questions