Palo Alto PCNSA Test Questions and
Answers
Which command backs up configuration files to a remote network device?
A. import
B. load
C. copy
D. export - Answer-D. export
The command load named configuration snapshot overwrites the current candidate
configuration with which three items? (Choose three.)
A. custom‐named candidate configuration snapshot (instead of the default snapshot)
B. custom‐named running configuration that you imported
C. snapshot.xml
D. current running configuration (running‐config.xml)
E. Palo Alto Networks updates - Answer-A. custom‐named candidate configuration
snapshot (instead of the default snapshot)
B. custom‐named running configuration that you imported
D. current running configuration (running‐config.xml)
This option overwrites the current candidate configuration with one of the following:
Custom‐named candidate configuration snapshot (instead of the default snapshot)
Custom‐named running configuration that you imported
Current running configuration (running‐config.xml)
What is the shortest time interval that you can configure a Palo Alto Networks
firewall to download WildFire updates?
A. 1 minute
B. 5 minutes
C. 15 minutes
D. 60 minutes - Answer-A. 1 minute
What is the publishing interval for WildFire updates, with a valid WildFire
license?
A. 1 minute
B. 5 minutes
C. 15 minutes
D. 60 minutes - Answer-B. 5 minutes
True or false. A Palo Alto Networks firewall automatically provides a backup of
the config during a software upgrade.
A. True
,B. False - Answer-A. True
Although the firewall automatically creates a configuration backup, a best
practice is to create and externally store a backup before you upgrade
If you have a Threat Prevention subscription and not a WildFire subscription,
how long must you wait for the WildFire signatures to be added into the
antivirus update?
A. 1 to 2 hours
B. 2 to 4 hours
C. 10 to 12 hours
D. 12 to 48 hours - Answer-D. 12 to 48 hours
Which three actions should you complete before you upgrade to a newer
version of software? (Choose three.)
A. Review the release notes to determine any impact of upgrading to a newer version of
software.
B. Ensure the firewall is connected to a reliable power source.
C. Export the device state.
D. Create and externally store a backup before you upgrade. - Answer-A. Review the
release notes to determine any impact of upgrading to a newer version of
software.
B. Ensure the firewall is connected to a reliable power source.
D. Create and externally store a backup before you upgrade.
What are five ways to download software? (Choose five.)
A. over the MGT interface on the control plane
B. over a data interface on the data plane
C. upload from a computer
D. from the Palo Alto Networks Customer Support Portal
E. from the PAN‐DB database
F. from Panorama - Answer-A. over the MGT interface on the control plane
B. over a data interface on the data plane
C. upload from a computer
D. from the Palo Alto Networks Customer Support Portal
F. from Panorama
Which two statements are true about an admin role profile role? (Choose two.)
A. It is a built‐in role.
B. It can be used for CLI commands.
C. It can be used for XML API.
D. Superuser is an example. - Answer-B. It can be used for CLI commands.
C. It can be used for XML API.
These are custom roles you can configure for more granular
access control over the functional areas of the web interface, CLI, and XML API.
, PAN‐OS® software supports which two authentication types? (Choose two.)
A. RADIUS
B. SMB
C. TACACS+
D. AWS - Answer-A. RADIUS
C. TACACS+
Which two actions are available for antivirus security profiles? (Choose two.)
A. continue
B. allow
C. block IP
D. alert - Answer-B. allow
D. alert
Which two HTTP Header Logging options are within a URL filtering profile? (Choose
two.)
A. User‐Agent
B. Safe Search
C. URL redirection
D. X‐Forward‐For - Answer-A. User‐Agent
D. X‐Forward‐For
What are the two components of Denial‐of‐Service Protection? (Choose two.)
A. zone protection profile
B. DoS protection profile and policy rules
C. flood protection
D. reconnaissance protection - Answer-A. zone protection profile
B. DoS protection profile and policy rules
Which two types of attacks does the PAN‐DB prevent? (Choose two.)
A. phishing sites
B. HTTP based command‐and‐control
C. infected JavaScript
D. flood attacks - Answer-A. phishing sites
B. HTTP based command‐and‐control
Which two valid URLs can be used in a custom URL category? (Choose two.)
A. ww.youtube.**
B. www.**.com
C. www.youtube.com
D. *.youtube.com - Answer-C. www.youtube.com
D. *.youtube.com
What are three methods of mapping usernames to IP addresses? (Choose three.)
A. Server Monitoring
Answers
Which command backs up configuration files to a remote network device?
A. import
B. load
C. copy
D. export - Answer-D. export
The command load named configuration snapshot overwrites the current candidate
configuration with which three items? (Choose three.)
A. custom‐named candidate configuration snapshot (instead of the default snapshot)
B. custom‐named running configuration that you imported
C. snapshot.xml
D. current running configuration (running‐config.xml)
E. Palo Alto Networks updates - Answer-A. custom‐named candidate configuration
snapshot (instead of the default snapshot)
B. custom‐named running configuration that you imported
D. current running configuration (running‐config.xml)
This option overwrites the current candidate configuration with one of the following:
Custom‐named candidate configuration snapshot (instead of the default snapshot)
Custom‐named running configuration that you imported
Current running configuration (running‐config.xml)
What is the shortest time interval that you can configure a Palo Alto Networks
firewall to download WildFire updates?
A. 1 minute
B. 5 minutes
C. 15 minutes
D. 60 minutes - Answer-A. 1 minute
What is the publishing interval for WildFire updates, with a valid WildFire
license?
A. 1 minute
B. 5 minutes
C. 15 minutes
D. 60 minutes - Answer-B. 5 minutes
True or false. A Palo Alto Networks firewall automatically provides a backup of
the config during a software upgrade.
A. True
,B. False - Answer-A. True
Although the firewall automatically creates a configuration backup, a best
practice is to create and externally store a backup before you upgrade
If you have a Threat Prevention subscription and not a WildFire subscription,
how long must you wait for the WildFire signatures to be added into the
antivirus update?
A. 1 to 2 hours
B. 2 to 4 hours
C. 10 to 12 hours
D. 12 to 48 hours - Answer-D. 12 to 48 hours
Which three actions should you complete before you upgrade to a newer
version of software? (Choose three.)
A. Review the release notes to determine any impact of upgrading to a newer version of
software.
B. Ensure the firewall is connected to a reliable power source.
C. Export the device state.
D. Create and externally store a backup before you upgrade. - Answer-A. Review the
release notes to determine any impact of upgrading to a newer version of
software.
B. Ensure the firewall is connected to a reliable power source.
D. Create and externally store a backup before you upgrade.
What are five ways to download software? (Choose five.)
A. over the MGT interface on the control plane
B. over a data interface on the data plane
C. upload from a computer
D. from the Palo Alto Networks Customer Support Portal
E. from the PAN‐DB database
F. from Panorama - Answer-A. over the MGT interface on the control plane
B. over a data interface on the data plane
C. upload from a computer
D. from the Palo Alto Networks Customer Support Portal
F. from Panorama
Which two statements are true about an admin role profile role? (Choose two.)
A. It is a built‐in role.
B. It can be used for CLI commands.
C. It can be used for XML API.
D. Superuser is an example. - Answer-B. It can be used for CLI commands.
C. It can be used for XML API.
These are custom roles you can configure for more granular
access control over the functional areas of the web interface, CLI, and XML API.
, PAN‐OS® software supports which two authentication types? (Choose two.)
A. RADIUS
B. SMB
C. TACACS+
D. AWS - Answer-A. RADIUS
C. TACACS+
Which two actions are available for antivirus security profiles? (Choose two.)
A. continue
B. allow
C. block IP
D. alert - Answer-B. allow
D. alert
Which two HTTP Header Logging options are within a URL filtering profile? (Choose
two.)
A. User‐Agent
B. Safe Search
C. URL redirection
D. X‐Forward‐For - Answer-A. User‐Agent
D. X‐Forward‐For
What are the two components of Denial‐of‐Service Protection? (Choose two.)
A. zone protection profile
B. DoS protection profile and policy rules
C. flood protection
D. reconnaissance protection - Answer-A. zone protection profile
B. DoS protection profile and policy rules
Which two types of attacks does the PAN‐DB prevent? (Choose two.)
A. phishing sites
B. HTTP based command‐and‐control
C. infected JavaScript
D. flood attacks - Answer-A. phishing sites
B. HTTP based command‐and‐control
Which two valid URLs can be used in a custom URL category? (Choose two.)
A. ww.youtube.**
B. www.**.com
C. www.youtube.com
D. *.youtube.com - Answer-C. www.youtube.com
D. *.youtube.com
What are three methods of mapping usernames to IP addresses? (Choose three.)
A. Server Monitoring
