PCNSA April 2023 – Questions & Correct Answers
Which statement is true about a URL Filtering Profile's continue password?
- There is a password per session.
- There is a password per website.
- There is a single, per-firewall password.
- There is a password per firewall administrator account. Correct Ans -
There is a single, per-firewall password.
Which three MGT port configuration settings must be configured before
you can remotely access the web interface? (Choose three.)
- netmask
- hostname
- DNS Server
- IP Address
- Default gateway Correct Ans - - Netmask
- IP Address
- Default gateway
Which two statements are true about sessions on the firewall? (Choose
two.)
- Return traffic is allowed.
- The only session information tracked in the session logs are the five
tuples.
- The firewall tries to match network packets to an existing session ID.
- Sessions always are matched to a Security policy rule Correct Ans -
- Return traffic is allowed.
- The firewall tries to match network packets to an existing session ID.
The network packet broker feature is supported by which four Palo Alto
Networks firewall series? (Choose four.)
,- PA-3000
- PA-3200
- PA-5000
- PA-5200
- PA-7000
- VM-Series Correct Ans - - PA-3200
- PA-5200
- PA-7000
- VM-Series
Which statement is true about firewall HTTP header insertion?
- Header insertion is only applied to ingress packets.
- Header insertion is only applied to egress packets.
- Header insertion is configured as part of custom URL categories.
- Header insertion is configured as part of a Data Filtering Profile
Correct Ans - - Header insertion is only applied to egress packets.
What is the maximum number of WildFire appliances that can be grouped
into a WildFire appliance cluster?
- 12
- 20
- 24
- 32 Correct Ans - - 20
Which user mapping method is recommended for a highly mobile user
base?
- GlobalProtect
- Client Probing
- Server Monitoring
- Session Monitoring Correct Ans - - GlobalProtect
Which three objects can be sent to WildFire for analysis? (Choose three.)
- email attachments
- MGT interface traffic
- URL links found in email
, - known files and URL links
- files traversing the firewall Correct Ans - - Email attachments
- URL links found in email
- files traversing the firewall
Which statement describes a function provided by an Interface
Management Profile?
- It determines which administrators can manage which interfaces.
- It determines which external services are accessible by the firewall.
- It determines the NetFlow and LLDP interface management settings.
- It determines which firewall services are accessible from external devices.
Correct Ans - - It determines which firewall services are accessible from
external devices.
Which interface type does NOT require any configuration changes to
adjacent network devices?
- Tap
- Layer 2
- Layer 3
- Virtual Wire Correct Ans - - Virtual Wire
Which action in a File Blocking Security Profile results in the user being
prompted to verify a file transfer?
- Alert
- Allow
- Block
- Continue Correct Ans - - Continue
What is the result of performing a firewall Commit operation?
- The saved configuration becomes the loaded configuration.
- The candidate configuration becomes the saved configuration.
- The loaded configuration becomes the candidate configuration.
- The candidate configuration becomes the running configuration.
Correct Ans - - The candidate configuration becomes the running
configuration.
Which statement is true about a URL Filtering Profile's continue password?
- There is a password per session.
- There is a password per website.
- There is a single, per-firewall password.
- There is a password per firewall administrator account. Correct Ans -
There is a single, per-firewall password.
Which three MGT port configuration settings must be configured before
you can remotely access the web interface? (Choose three.)
- netmask
- hostname
- DNS Server
- IP Address
- Default gateway Correct Ans - - Netmask
- IP Address
- Default gateway
Which two statements are true about sessions on the firewall? (Choose
two.)
- Return traffic is allowed.
- The only session information tracked in the session logs are the five
tuples.
- The firewall tries to match network packets to an existing session ID.
- Sessions always are matched to a Security policy rule Correct Ans -
- Return traffic is allowed.
- The firewall tries to match network packets to an existing session ID.
The network packet broker feature is supported by which four Palo Alto
Networks firewall series? (Choose four.)
,- PA-3000
- PA-3200
- PA-5000
- PA-5200
- PA-7000
- VM-Series Correct Ans - - PA-3200
- PA-5200
- PA-7000
- VM-Series
Which statement is true about firewall HTTP header insertion?
- Header insertion is only applied to ingress packets.
- Header insertion is only applied to egress packets.
- Header insertion is configured as part of custom URL categories.
- Header insertion is configured as part of a Data Filtering Profile
Correct Ans - - Header insertion is only applied to egress packets.
What is the maximum number of WildFire appliances that can be grouped
into a WildFire appliance cluster?
- 12
- 20
- 24
- 32 Correct Ans - - 20
Which user mapping method is recommended for a highly mobile user
base?
- GlobalProtect
- Client Probing
- Server Monitoring
- Session Monitoring Correct Ans - - GlobalProtect
Which three objects can be sent to WildFire for analysis? (Choose three.)
- email attachments
- MGT interface traffic
- URL links found in email
, - known files and URL links
- files traversing the firewall Correct Ans - - Email attachments
- URL links found in email
- files traversing the firewall
Which statement describes a function provided by an Interface
Management Profile?
- It determines which administrators can manage which interfaces.
- It determines which external services are accessible by the firewall.
- It determines the NetFlow and LLDP interface management settings.
- It determines which firewall services are accessible from external devices.
Correct Ans - - It determines which firewall services are accessible from
external devices.
Which interface type does NOT require any configuration changes to
adjacent network devices?
- Tap
- Layer 2
- Layer 3
- Virtual Wire Correct Ans - - Virtual Wire
Which action in a File Blocking Security Profile results in the user being
prompted to verify a file transfer?
- Alert
- Allow
- Block
- Continue Correct Ans - - Continue
What is the result of performing a firewall Commit operation?
- The saved configuration becomes the loaded configuration.
- The candidate configuration becomes the saved configuration.
- The loaded configuration becomes the candidate configuration.
- The candidate configuration becomes the running configuration.
Correct Ans - - The candidate configuration becomes the running
configuration.
