PCNSA/PCNSA – Questions And Detailed Answers
What are two firewall management methods? Correct Ans - CLI
XML API
Which two devices are used to connect a computer to the firewall for
management purposes? Correct Ans - Serial cable
RJ-45 Ethernet cable
What is the default IP address assigned to the MGT interfaces of a Palo Alto
Networks firewall? Correct Ans - 192.168.1.1
What are the two default services that are available on the MGT interface?
Correct Ans - HTTPS
SSH
True or false? Service route traffic has Security policy rules applied against
it Correct Ans - True
Service routes may be used to forward which two traffic types out of a data
port? Correct Ans - External dynamic lists
Palo Alto Networks updates
Which command must be performed on the firewall to activate any
changes? Correct Ans - Commit
Which command backs up configuration files to a remote network device?
Correct Ans - Export
The command load named configuration snapshot overwrites the current
candidate configuration with which three items? Correct Ans -
Custom-named candidate configuration snapshot (instead of the default
snapshot)
Current running configuration (running-config.xml)
Palo Alto Networks updates
What are two firewall management methods? Correct Ans - CLI
XML API
, True or false? A Palo Alto Networks firewall automatically provides a
backup of the configuration during a software upgrade. Correct Ans -
True
If you have a Threat Prevention subscription but not a WildFire
subscription, how long must you wait for the WildFire signatures to be
added into the antivirus update? Correct Ans - 24 to 48 hours
Which three actions should you complete before you upgrade to a newer
version of software? Correct Ans - Review the release notes to
determine any impact of upgrading to a newer version of software.
Ensure that the firewall is connected to a reliable power source.
Create and externally store a backup before you upgrade.
Which two default zones are included with the PAN-OS software?
Correct Ans - Interzone
Intrazone
Which two zone types are valid options? Correct Ans - Tap
Virtual wire
Which two statements about interfaces are correct? Correct Ans -
Interfaces do not have to be configured before you can create a zone.
An interface can belong to only one zone.
Which two interface types can belong in a Layer 3 zone? Correct Ans -
Looback
Tunnel
What are used to control traffic through zones? Correct Ans -
Security policy rules
For inbound inspection, which two actions can be done with a Tap
interface? Correct Ans - Decrypt traffic
Log traffic
Which two actions can be done with a Virtual Wire interface? Correct
Ans - NAT
Log traffic
What are two firewall management methods? Correct Ans - CLI
XML API
Which two devices are used to connect a computer to the firewall for
management purposes? Correct Ans - Serial cable
RJ-45 Ethernet cable
What is the default IP address assigned to the MGT interfaces of a Palo Alto
Networks firewall? Correct Ans - 192.168.1.1
What are the two default services that are available on the MGT interface?
Correct Ans - HTTPS
SSH
True or false? Service route traffic has Security policy rules applied against
it Correct Ans - True
Service routes may be used to forward which two traffic types out of a data
port? Correct Ans - External dynamic lists
Palo Alto Networks updates
Which command must be performed on the firewall to activate any
changes? Correct Ans - Commit
Which command backs up configuration files to a remote network device?
Correct Ans - Export
The command load named configuration snapshot overwrites the current
candidate configuration with which three items? Correct Ans -
Custom-named candidate configuration snapshot (instead of the default
snapshot)
Current running configuration (running-config.xml)
Palo Alto Networks updates
What are two firewall management methods? Correct Ans - CLI
XML API
, True or false? A Palo Alto Networks firewall automatically provides a
backup of the configuration during a software upgrade. Correct Ans -
True
If you have a Threat Prevention subscription but not a WildFire
subscription, how long must you wait for the WildFire signatures to be
added into the antivirus update? Correct Ans - 24 to 48 hours
Which three actions should you complete before you upgrade to a newer
version of software? Correct Ans - Review the release notes to
determine any impact of upgrading to a newer version of software.
Ensure that the firewall is connected to a reliable power source.
Create and externally store a backup before you upgrade.
Which two default zones are included with the PAN-OS software?
Correct Ans - Interzone
Intrazone
Which two zone types are valid options? Correct Ans - Tap
Virtual wire
Which two statements about interfaces are correct? Correct Ans -
Interfaces do not have to be configured before you can create a zone.
An interface can belong to only one zone.
Which two interface types can belong in a Layer 3 zone? Correct Ans -
Looback
Tunnel
What are used to control traffic through zones? Correct Ans -
Security policy rules
For inbound inspection, which two actions can be done with a Tap
interface? Correct Ans - Decrypt traffic
Log traffic
Which two actions can be done with a Virtual Wire interface? Correct
Ans - NAT
Log traffic
