Sample Questions of PCNSA Dumps With 100% Exam Passing Guarantee [Q115-Q139]

NO.115 An administrator wishes to follow best practices for logging traffic that traverses the firewall Which log setting is correct?

NO.116 To use Active Directory to authenticate administrators, which server profile is required in the authentication profile?

NO.117 Arrange the correct order that the URL classifications are processed within the system.

NO.118 An internal host wants to connect to servers of the internet through using source NAT.
Which policy is required to enable source NAT on the firewall?

NO.119 Which interface does not require a MAC or IP address?

NO.120 Match the network device with the correct User-ID technology.

NO.121 Given the scenario, which two statements are correct regarding multiple static default routes? (Choose two.)

NO.122 Drag and Drop Question
Place the steps in the correct packet-processing order of operations.
Select and Place:

NO.123 A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base.
On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.
Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

NO.124 Which two statements are correct about App-ID content updates? (Choose two.)

NO.125 The Palo Alto Networks NGFW was configured with a single virtual router named VR-1 What changes are required on VR-1 to route traffic between two interfaces on the NGFW>

NO.126 Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

NO.127 Match the Palo Alto Networks Security Operating Platform architecture to its description.

NO.128 Which feature would be useful for preventing traffic from hosting providers that place few restrictions on content, whose services are frequently used by attackers to distribute illegal or unethical material?

NO.129 How many zones can an interface be assigned with a Palo Alto Networks firewall?

NO.130 Which Security policy match condition would an administrator use to block traffic from IP addresses on the Palo Alto Networks EDL of Known Malicious IP Addresses list?

NO.131 Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.

Which two Security policy rules will accomplish this configuration? (Choose two.)

NO.132 Order the steps needed to create a new security zone with a Palo Alto Networks firewall.

Step 1 – Select network tab
Step 2 – Select zones from the list of available items
Step 3 – Select Add
Step 4 – Specify Zone Name
Step 5 – Specify Zone Type
Step 6 – Assign interfaces as needed

NO.133 Based on the show security policy rule would match all FTP traffic from the inside zone to the outside zone?

NO.134 Which statement is true regarding a Best Practice Assessment?

NO.135 Match the network device with the correct User-ID technology.

NO.136 Which two statements are true for the DNS Security service introduced in PAN-OS version 10.0? (Choose two.)

NO.137 Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)

NO.138 Access to which feature requires the PAN-OS Filtering license?

NO.139 Which administrator type utilizes predefined roles for a local administrator account?