PCNSA Exam Questions

What are three valid source or D=destination conditions available as Security policy qualifiers? (Choose three.)

Which path in PAN-OS 11.x would you follow to see how new and modified App-IDs impact a Security policy?

What are three configurable interface types for a data-plane ethernet interface? (Choose three.)

all other sites in the same category. Which object should the administrator create to use as a match condition for the security policy

Files are sent to the WildFire cloud service via the WildFire Analysis Profile. How are these files used?

Which feature enables an administrator to review the Security policy rule base for unused rules?

What is a default setting for NAT Translated Packets when the destination NAT translation is selected as Dynamic IP (with session distribution)?

Which table for NAT and NPTv6 (IPv6-to-IPv6 Network Prefix Translation) settings is available only on Panorama?

Which action can be performed when grouping rules by group tags?

Which two DNS policy actions in the anti-spyware security profile can prevent hacking attacks through DNS queries to malicious domains? (Choose two.)

What is the best-practice approach to logging traffic that traverses the firewall?

In which two types of NAT can oversubscription be used? (Choose two.)

Where in the PAN-OS GUI can an administrator monitor the rule usage for a specified period of time?

In order to attach an Antivirus, Anti-Spyware and Vulnerability Protection security profile to your Security Policy rules, which setting must be selected?

Within a WildFire Analysis Profile, what match criteria can be defined to forward samples for analysis?

What must first be created on the firewall for SAML authentication to be configured?

Which two options does the firewall use to dynamically populate address group members? (Choose two.)

What two actions can be taken when implementing an exception to an External Dynamic List? (Choose two.)

Which feature enables an administrator to review the Security policy rule base for unused rules?

An administrator should filter NGFW traffic logs by which attribute column to determine if the entry is for the start or end of the session?

Which CLI command will help confirm if FQDN objects are resolved in the event there is a shadow rule?

In the PAN-OS Web Interface, which is a session distribution method offered under NAT Translated Packet Tab to choose how the firewall assigns sessions?