Special Summer Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: Board70

PCNSA Exam Dumps - Paloalto Networks Network Security Administrator Questions and Answers

Question # 94

An administrator is reviewing the Security policy rules shown in the screenshot below.

Which statement is correct about the information displayed?

Options:

A.

Eleven rules use the "Infrastructure* tag.

B.

The view Rulebase as Groups is checked.

C.

There are seven Security policy rules on this firewall.

D.

Highlight Unused Rules is checked.

Buy Now
Question # 95

Review the Screenshot:

Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the

SERVER zone to the DMZ on SSH only.

Which rule group enables the required traffic?

A)

B)

C)

D)

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Question # 96

What are three valid ways to map an IP address to a username? (Choose three.)

Options:

A.

using the XML API

B.

DHCP Relay logs

C.

a user connecting into a GlobalProtect gateway using a GlobalProtect Agent

D.

usernames inserted inside HTTP Headers

E.

WildFire verdict reports

Buy Now
Question # 97

Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

Options:

A.

The web session was unsuccessfully decrypted.

B.

The traffic was denied by security profile.

C.

The traffic was denied by URL filtering.

D.

The web session was decrypted.

Buy Now
Question # 98

Which table for NAT and NPTv6 (IPv6-to-IPv6 Network Prefix Translation) settings is available only on Panorama?

Options:

A.

NAT Target Tab

B.

NAT Active/Active HA Binding Tab

C.

NAT Translated Packet Tab

D.

NAT Policies General Tab

Buy Now
Question # 99

Match each feature to the DoS Protection Policy or the DoS Protection Profile.

Options:

Buy Now
Question # 100

A network administrator created an intrazone Security policy rule on the firewall. The source zones were set to IT. Finance, and HR.

Which two types of traffic will the rule apply to? (Choose two)

Options:

A.

traffic between zone IT and zone Finance

B.

traffic between zone Finance and zone HR

C.

traffic within zone IT

D.

traffic within zone HR

Buy Now
Question # 101

Which information is included in device state other than the local configuration?

Options:

A.

uncommitted changes

B.

audit logs to provide information of administrative account changes

C.

system logs to provide information of PAN-OS changes

D.

device group and template settings pushed from Panorama

Buy Now
Question # 102

Match the Palo Alto Networks Security Operating Platform architecture to its description.

Options:

Buy Now
Question # 103

Which two security profile types can be attached to a security policy? (Choose two.)

Options:

A.

antivirus

B.

DDoS protection

C.

threat

D.

vulnerability

Buy Now
Exam Code: PCNSA
Exam Name: Palo Alto Networks Certified Network Security Administrator (PAN-OS 10.0)
Last Update: Apr 1, 2025
Questions: 364
PCNSA pdf

PCNSA PDF

$25.5  $84.99
PCNSA Engine

PCNSA Testing Engine

$28.5  $94.99
PCNSA PDF + Engine

PCNSA PDF + Testing Engine

$40.5  $134.99