PCNSA Quiz P2 - Questions With Solutions

PCNSA Quiz P2 - Questions With Solutions

A. true ✔️Ans - 25. True or false. Service route traffic has Security
policy rules applied against it.
A. true
B. false

A. External Dynamic Lists
D. Palo Alto Networks updates ✔️Ans - 26. Service routes may be
used to forward which two traffic types out a data port? (Choose two.)
A. External Dynamic Lists
B. MineMeld
C. Skype
D. Palo Alto Networks updates

C. data ✔️Ans - 27. Which firewall plane does the running-
configuration reside on?
A. management
B. control
C. data
D. security

B. control ✔️Ans - 28. Which firewall plane does the candidate
configuration reside on?
A. management
B. control
C. data
D. security

C. XML ✔️Ans - 29. Candidate config and running config files are
saved as which file type?
A. TXT
B. HTML
C. XML
D. RAR

A. commit ✔️Ans - 30. Which command must be performed on the
firewall to activate any changes?

,A. commit
B. save
C. load
D. import

D. export ✔️Ans - 31. Which command backs up configuration files to
a remote network device?
A. import
B. load
C. copy
D. export

A. custom-named candidate configuration snapshot (instead of the default
snapshot)
B. custom-named running configuration that you imported

D. current running configuration (running-config.xml)
E. Palo Alto Networks updates ✔️Ans - 32. The command load named
configuration snapshot overwrites the current candidate configuration
with which three items? (Choose three.)
A. custom-named candidate configuration snapshot (instead of the default
snapshot)
B. custom-named running configuration that you imported
C. snapshot.xml
D. current running configuration (running-config.xml)
E. Palo Alto Networks updates

A. 1 minute ✔️Ans - 33. What is the shortest time interval that you
can configure a Palo Alto Networks firewall to download WildFire updates?
A. 1 minute
B. 5 minutes
C. 15 minutes
D. 60 minutes

B. 5 minutes ✔️Ans - 34. What is the publishing interval for WildFire
updates, with a valid WildFire license?
A. 1 minute
B. 5 minutes
C. 15 minutes

, D. 60 minutes

A. true ✔️Ans - 35. True or false. A Palo Alto Networks firewall
automatically provides a backup of the configuration during a software
upgrade.
A. true
B. false

D. 24 to 48 hours ✔️Ans - 36. If you have a Threat Prevention
subscription but not a WildFire subscription, how long must you wait for
the WildFire signatures to be added into the antivirus update?
A. 1 to 2 hours
B. 2 to 4 hours
C. 10 to 12 hours
D. 24 to 48 hours

A. Review the release notes to determine any impact of upgrading to a
newer version of software.
B. Ensure the firewall is connected to a reliable power source.
D. Create and externally store a backup before you upgrade. ✔️Ans -
37. Which three actions should you complete before you upgrade to a
newer version of software? (Choose three.)
A. Review the release notes to determine any impact of upgrading to a
newer version of software.
B. Ensure the firewall is connected to a reliable power source.
C. Export the device state.
D. Create and externally store a backup before you upgrade.
E. Put the firewall in maintenance mode.

B. It can be used for CLI commands.
C. It can be used for XML API. ✔️Ans - 38. Which two statements are
true about a Role Based Admin Role Profile role? (Choose two.)
A. It is a built-in role.
B. It can be used for CLI commands.
C. It can be used for XML API.
D. Superuser is an example.

A. RADIUS