Palo Alto Networks Certified Network Security Administrator407 questions across 41 pages are complete and free, with no account or card.
407 questions in this bank
Free access · progress saved on this device
The Palo Alto Networks NGFW was configured with a single virtual router named VR-1. What changes are required on VR-1 to route traffic between two interfaces on the NGFW?
Answer: B
They are not using the default VR. 1 was made so interfaces and static routes have to be created. Since Interfaces come first that the answer.
Source: Adapted from community discussion — kewokil120
An administrator wants to prevent users from submitting corporate credentials in a phishing attack. Which Security profile should be applied?
Answer: C
Reference: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/prevent-credential-phishing/set-up-credential-phishing- prevention.html#idc77030dc-6022-4458-8c50-1dc0fe7cffe4
Which two rule types allow the administrator to modify the destination zone? (Choose two.)
Answer: AD
Answers Are: B & D The “predefined” or Panorama pushed “intrazone-default” and “interzone-default” rules names or functions cannot be changed. This is indicated by a green boarder around the editor and the “Read Only” wording in the title. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClomCAC
Source: Adapted from community discussion — Batdre84
What is the main function of Policy Optimizer?
Answer: D
Reference: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/app-id-features/policy-optimizer.html
Source: Adapted from community discussion — H3kerman
Based on the screenshot, what is the purpose of the group in User labelled `it`?
Answer: C
Which action results in the firewall blocking network traffic without notifying the sender?
Answer: A
Assume that traffic matches a Security policy rule but the attached Security Profiles is configured to block matching traffic. Which statement accurately describes how the firewall will apply an action to matching traffic?
Answer: D
That is true, Security profiles are applied only after a Security policy allow match; if the traffic is for example dropped they will not match Security profiles.
Source: Adapted from community discussion — drogadotcom
Which Security profile can you apply to protect against malware such as worms and Trojans?
Answer: A
Reference: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-profiles#:~:text=Antivirus%20profiles%20protect%20against%20viruses,as %20well%20as%20spyware%20downloads .
Which license is required to use the Palo Alto Networks built-in IP address EDLs?
Answer: B
Reference: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/built-in-edls.html#:~:text=With%20an% 20active%20Threat%20Prevention,to%20protect%20against%20malicious%20hosts
Source: Adapted from community discussion — H3kerman
Which statement is true about Panorama managed devices?
Answer: B
In the context of "panorama managed devices" i think a local configuration lock is a lock placed on a firewall config locally, by logging on to it, rather than logging on to panorama. If any lock placed by another administrator, in panorama or locally on a firewall. Would simply be unlocked by a commit done in panorama by any administrator, it's purpose would be defeated.
Source: Adapted from community discussion — Blender808
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSA practice, question 31. 407 questions available.
Version 1.0.0. How we source questions