PCNSA ACTUAL UPDATED Exam
Questions and CORRECT Answers
Which statement is true about a URL Filtering Profile's continue password?
- There is a password per session.
- There is a password per website.
- There is a single, per-firewall password.
- There is a password per firewall administrator account. - CORRECT ANSWER - There
is a single, per-firewall password.
Which three MGT port configuration settings must be configured before you can remotely access
the web interface? (Choose three.)
- netmask
- hostname
- DNS Server
- IP Address
- Default gateway - CORRECT ANSWER - - Netmask
- IP Address
- Default gateway
Which two statements are true about sessions on the firewall? (Choose two.)
- Return traffic is allowed.
- The only session information tracked in the session logs are the five tuples.
- The firewall tries to match network packets to an existing session ID.
,- Sessions always are matched to a Security policy rule - CORRECT ANSWER - - Return
traffic is allowed.
- The firewall tries to match network packets to an existing session ID.
The network packet broker feature is supported by which four Palo Alto Networks firewall
series? (Choose four.)
- PA-3000
- PA-3200
- PA-5000
- PA-5200
- PA-7000
- VM-Series - CORRECT ANSWER - - PA-3200
- PA-5200
- PA-7000
- VM-Series
Which statement is true about firewall HTTP header insertion?
- Header insertion is only applied to ingress packets.
- Header insertion is only applied to egress packets.
- Header insertion is configured as part of custom URL categories.
- Header insertion is configured as part of a Data Filtering Profile - CORRECT
ANSWER - - Header insertion is only applied to egress packets.
What is the maximum number of WildFire appliances that can be grouped into a WildFire
appliance cluster?
,- 12
- 20
- 24
- 32 - CORRECT ANSWER - - 20
Which user mapping method is recommended for a highly mobile user base?
- GlobalProtect
- Client Probing
- Server Monitoring
- Session Monitoring - CORRECT ANSWER - - GlobalProtect
Which three objects can be sent to WildFire for analysis? (Choose three.)
- email attachments
- MGT interface traffic
- URL links found in email
- known files and URL links
- files traversing the firewall - CORRECT ANSWER - - Email attachments
- URL links found in email
- files traversing the firewall
Which statement describes a function provided by an Interface Management Profile?
- It determines which administrators can manage which interfaces.
- It determines which external services are accessible by the firewall.
- It determines the NetFlow and LLDP interface management settings.
, - It determines which firewall services are accessible from external devices. - CORRECT
ANSWER - - It determines which firewall services are accessible from external devices.
Which interface type does NOT require any configuration changes to adjacent network devices?
- Tap
- Layer 2
- Layer 3
- Virtual Wire - CORRECT ANSWER - - Virtual Wire
Which action in a File Blocking Security Profile results in the user being prompted to verify a
file transfer?
- Alert
- Allow
- Block
- Continue - CORRECT ANSWER - - Continue
What is the result of performing a firewall Commit operation?
- The saved configuration becomes the loaded configuration.
- The candidate configuration becomes the saved configuration.
- The loaded configuration becomes the candidate configuration.
- The candidate configuration becomes the running configuration. - CORRECT
ANSWER - - The candidate configuration becomes the running configuration.
What are two benefits of attaching a Decryption Profile to a Decryption policy no decrypt rule?
(Choose two.)
Questions and CORRECT Answers
Which statement is true about a URL Filtering Profile's continue password?
- There is a password per session.
- There is a password per website.
- There is a single, per-firewall password.
- There is a password per firewall administrator account. - CORRECT ANSWER - There
is a single, per-firewall password.
Which three MGT port configuration settings must be configured before you can remotely access
the web interface? (Choose three.)
- netmask
- hostname
- DNS Server
- IP Address
- Default gateway - CORRECT ANSWER - - Netmask
- IP Address
- Default gateway
Which two statements are true about sessions on the firewall? (Choose two.)
- Return traffic is allowed.
- The only session information tracked in the session logs are the five tuples.
- The firewall tries to match network packets to an existing session ID.
,- Sessions always are matched to a Security policy rule - CORRECT ANSWER - - Return
traffic is allowed.
- The firewall tries to match network packets to an existing session ID.
The network packet broker feature is supported by which four Palo Alto Networks firewall
series? (Choose four.)
- PA-3000
- PA-3200
- PA-5000
- PA-5200
- PA-7000
- VM-Series - CORRECT ANSWER - - PA-3200
- PA-5200
- PA-7000
- VM-Series
Which statement is true about firewall HTTP header insertion?
- Header insertion is only applied to ingress packets.
- Header insertion is only applied to egress packets.
- Header insertion is configured as part of custom URL categories.
- Header insertion is configured as part of a Data Filtering Profile - CORRECT
ANSWER - - Header insertion is only applied to egress packets.
What is the maximum number of WildFire appliances that can be grouped into a WildFire
appliance cluster?
,- 12
- 20
- 24
- 32 - CORRECT ANSWER - - 20
Which user mapping method is recommended for a highly mobile user base?
- GlobalProtect
- Client Probing
- Server Monitoring
- Session Monitoring - CORRECT ANSWER - - GlobalProtect
Which three objects can be sent to WildFire for analysis? (Choose three.)
- email attachments
- MGT interface traffic
- URL links found in email
- known files and URL links
- files traversing the firewall - CORRECT ANSWER - - Email attachments
- URL links found in email
- files traversing the firewall
Which statement describes a function provided by an Interface Management Profile?
- It determines which administrators can manage which interfaces.
- It determines which external services are accessible by the firewall.
- It determines the NetFlow and LLDP interface management settings.
, - It determines which firewall services are accessible from external devices. - CORRECT
ANSWER - - It determines which firewall services are accessible from external devices.
Which interface type does NOT require any configuration changes to adjacent network devices?
- Tap
- Layer 2
- Layer 3
- Virtual Wire - CORRECT ANSWER - - Virtual Wire
Which action in a File Blocking Security Profile results in the user being prompted to verify a
file transfer?
- Alert
- Allow
- Block
- Continue - CORRECT ANSWER - - Continue
What is the result of performing a firewall Commit operation?
- The saved configuration becomes the loaded configuration.
- The candidate configuration becomes the saved configuration.
- The loaded configuration becomes the candidate configuration.
- The candidate configuration becomes the running configuration. - CORRECT
ANSWER - - The candidate configuration becomes the running configuration.
What are two benefits of attaching a Decryption Profile to a Decryption policy no decrypt rule?
(Choose two.)
