PCNSA PALO ALTO NETWORKS |ACTUAL QUESTIONS AND VERIFIED ANSWERS|BRAND NEW UPDATE|GRADED A+

PCNSA PALO ALTO NETWORKS |ACTUAL
QUESTIONS AND VERIFIED ANSWERS|BRAND NEW
2026-2027 UPDATE|GRADED A+


Question 1

What are two valid tag types for use in a DAG?

(Choose two.)

A. dynamic tag

B. membership tag

C. wildcard tag

D. static tag

CORRECT ANSWER

AD




Question 2

Which interface type is used to monitor traffic and cannot be used to perform traffic
shaping?

A. Virtual Wire

B. Layer3

C. Layer2

D. Tap

CORRECT ANSWER

D




Question 3



1

,What is true about Panorama managed firewalls?

A. Commit on local firewalls can be prohibited, which results in no configuration backups on
local firewalls.

B. By default, Panorama stores up to ten backups for each firewall.

C. By default, Panorama stores up to ten device states for each firewall.

D. After a commit on a local firewall, a backup is sent of its running configuration to
Panorama.

CORRECT ANSWER

D




Question 4

If the NGFW reboots before you commit your changes, how can you revert the candidate
configuration to the current snapshot to restore changes you made between the last
commit and the last snapshot?

A. revert to the last saved configuration

B. revert to the first saved configuration

C. reverse the saved config

D. Undo

CORRECT ANSWER

A




Question 5

What are two types of Security profiles? (Choose two.)

A. URL Filtering

B. Antivirus

C. Spyware Filtering

D. File Filtering

2

,CORRECT ANSWER

AB




Question 6

PAN-OS® software supports which two authentication types? (Choose two.)

A. Token

B. LMS

C. kerberos

D. RADIUS

CORRECT ANSWER

CD




Question 7

Which Layer 2 interfaces can be used to switch traffic between VLANs?

A. Tap interfaces

B. other Layer 2 interfaces

C. other subnets

D. Layer 2 and 3 interfaces

CORRECT ANSWER

B




Question 8

How often are new antivirus signatures published?

A. weekly


3

, B. monthly

C. hourly

D. daily

CORRECT ANSWER

D




Question 9

An administrator is reviewing the security policy configuration and notices that the policy
to block traffic to an internal web server uses the reset-both action. What are two
potential risks associated with the reset-both Security policy action? (Choose two.)

A. Sending a reset allows the TCP session to send data, which may allow malicious traffic.

B. Sending a reset can facilitate malicious use such as reverse mapping through port
scanning.

C. Sending a reset yields a poor end-user experience.

D. Sending a reset will consume server resources with half-open sockets.

CORRECT ANSWER

AB




Question 10

Which two agents can be used to monitor servers and gather User-ID information?
(Choose two.)

A. Windows-based client

B. Traps agent

C. Built-in agent inside the PAN-OS® firewall

D. Cortex Data Lake

CORRECT ANSWER

AC

4