Free Palo Alto Networks Certified Network Security Administrator Exam PCNSA Exam Practice Test

Which interface does not require a MAC or IP address?

• Virtual Wire
• Layer3
• Layer2
• Loopback

An administrator would like to apply a more restrictive Security profile to traffic for file sharing applications. The administrator does not want to update the Security policy or object when new applications are released.Which object should the administrator use as a match condition in the Security policy?

• the Content Delivery Networks URL category
• the Online Storage and Backup URL category
• an application group containing all of the file-sharing App-IDs reported in the traffic logs
• an application filter for applications whose subcategory is file-sharing

An administrator wants to create a No-NAT rule to exempt a flow from the default NAT rule. What is the best way to do this?

• Create a Security policy rule to allow the traffic.
• Create a new NAT rule with the correct parameters and leave the translation type as None
• Create a static NAT rule with an application override.
• Create a static NAT rule translating to the destination interface.

In which two Security Profiles can an action equal to the block IP feature be configured? (Choose two.)

• Antivirus
• URL Filtering
• Vulnerability Protection
• Anti-spyware

The NetSec Manager asked to create a new firewall Local Administrator profile with customized privileges named NewAdmin. This new administrator has to authenticate without inserting any username or password to access the WebUI.What steps should the administrator follow to create the New_Admin Administrator profile?

• 1. Select the 'Use only client certificate authentication' check box. 2. Set Role to Role Based. 3. Issue to the Client a Certificate with Common Name = NewAdmin
• 1. Select the 'Use only client certificate authentication' check box. 2. Set Role to Dynamic. 3. Issue to the Client a Certificate with Certificate Name = NewAdmin
• 1. Set the Authentication profile to Local. 2. Select the 'Use only client certificate authentication' check box. 3. Set Role to Role Based.
• 1. Select the 'Use only client certificate authentication' check box. 2. Set Role to Dynamic. 3. Issue to the Client a Certificate with Common Name = New Admin

Which interface type can use virtual routers and routing protocols?

• Tap
• Layer3
• Virtual Wire
• Layer2

Which link in the web interface enables a security administrator to view the security policy rules that match new application signatures?

• Review Apps
• Review App Matches
• Pre-analyze
• Review Policies

Which stage of the cyber-attack lifecycle makes it important to provide ongoing education to users on spear phishing links, unknown emails, and risky websites?

• reconnaissance
• delivery
• exploitation
• installation

Recently changes were made to the firewall to optimize the policies and the security team wants to see if those changes are helping.What is the quickest way to reset the hit counter to zero in all the security policy rules?

• At the CLI enter the command reset rules and press Enter
• Highlight a rule and use the Reset Rule Hit Counter > Selected Rules for each rule
• Reboot the firewall
• Use the Reset Rule Hit Counter > All Rules option

Which type firewall configuration contains in-progress configuration changes?

• backup
• running
• candidate
• committed