Pass PCNSA Exam Latest Practice Questions Updated on Mar 09, 2023 [Q10-Q32]

QUESTION 10
If using group mapping with Active Directory Universal Groups, what must you do when configuring the User-ID?

QUESTION 11
In a Security policy, what is the quickest way to reset all policy rule hit counters to zero?

QUESTION 12
Which objects would be useful for combining several services that are often defined together?

QUESTION 13
Which statement is true regarding NAT rules?

QUESTION 14
An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

QUESTION 15
Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)

QUESTION 16
Which statement is true about Panorama managed devices?

QUESTION 17
A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base.
On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.
Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

QUESTION 18
When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?

QUESTION 19
Which service protects cloud-based applications such as Dropbox and Salesforce by administering permissions and scanning files for sensitive information?

QUESTION 20
Match the Cyber-Attack Lifecycle stage to its correct description.

QUESTION 21
An administrator is reviewing another administrator’s Security policy log settings.
Which log setting configuration is consistent with best practices for normal traffic?

QUESTION 22
Which license must an administrator acquire prior to downloading Antivirus updates for use with the firewall?

QUESTION 23
An administrator wants to prevent access to media content websites that are risky.
Which two URL categories should be combined in a custom URL category to accomplish this goal? (Choose two)

QUESTION 24
Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.

Which two Security policy rules will accomplish this configuration? (Choose two.)

QUESTION 25
A Heatmap provides an adoption rate for which three features? (Choose three.)

QUESTION 26
Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)

QUESTION 27
Which DNS Query action is recommended for traffic that is allowed by Security policy and matches Palo Alto Networks Content DNS Signatures?

QUESTION 28
An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated?
(Choose two.)

QUESTION 29
Which license is required to use the Palo Alto Networks built-in IP address EDLs?

QUESTION 30
Which data-plane processor layer of the graphic shown provides uniform matching for spyware and vulnerability exploits on a Palo Alto Networks Firewall?

QUESTION 31
Based on the security policy rules shown, ssh will be allowed on which port?

QUESTION 32
Match the Palo Alto Networks Security Operating Platform architecture to its description.