©THEBRIGHTSTARS 2024
PCNSA Study Guide Sample Questions With
Correct Answers
Q1. Which two statements are true about a Role Based Admin Role Profile role? (Choose two.) -
answer✔✔It can be used for CLI commands.
It can be used for XML API.
Q2. The management console supports which two authentication types? (Choose two.) -
answer✔✔RADIUS
TACACS+
Q3. Which two Dynamic Admin Role types are available on the PAN-OS software? (Choose
two.) - answer✔✔superuser
device administrator (read-only)
Q4. Which type of profile does an authentication sequence include? - answer✔✔Authentication
Q5. An Authentication profile includes which other type of profile? - answer✔✔Server
Q6. True or false? Dynamic Admin Roles are called "dynamic" because you can customize them.
- answer✔✔false
Q7. Which profile is used to override global minimum password complexity requirements? -
answer✔✔Password
Q8. What does an application filter enable an administrator to do? - answer✔✔dynamically
categorize multiple applications
Q9. Which two items can be added to an application group? (Choose two.) -
answer✔✔application groups
application filters
Q10. What are two application characteristics? (Choose two.) - answer✔✔excessive bandwidth
use
evasive
, ©THEBRIGHTSTARS 2024
Q.1 What will be the result of one or more occurrences of shadowing? - answer✔✔a warning
Q2. Which column in the Applications and Threats screen includes the options Review Apps and
Review - answer✔✔Action
Q3. Which link can you select in the web interface to minimize the risk of installing new App-ID
updates? - answer✔✔Disable new apps in content update
Q5. Which two protocols are implicitly allowed when you select the facebook-base application?
(Choose two.) - answer✔✔web-browsing
ssl
Q7. What are the two default (predefined) Security policy rule types in PAN-OS software?
(Choose two.) - answer✔✔Interzone
Intrazone
Q8. Which type of Security policy rules most often exist above the two predefined Security
policies? - answer✔✔Universal
Q9. What does the TCP Half Closed setting mean? - answer✔✔maximum length of time that a
session remains in the session table between reception of thefirst FIN and reception of the second
FIN or RST
Q11. Which two HTTP Header Logging options are within a URL Filtering profile? (Choose
two.) - answer✔✔User-Agent
X-Forwarded-For
Q12. What are two source NAT types? (Choose two.) - answer✔✔static
dynamic
Which phrase is a simple way to remember how to configure Security policy rules where NAT
wasimplemented? - answer✔✔pre-NAT IP, post-NAT zone
Q14. What are two types of destination NAT? (Choose two.) - answer✔✔dynamic IP (with
session distribution)
static
Q15. What are two possible values for DIPP (Dynamic IP and Port NAT) oversubscription?
(Choose two.) - answer✔✔1x
4x
PCNSA Study Guide Sample Questions With
Correct Answers
Q1. Which two statements are true about a Role Based Admin Role Profile role? (Choose two.) -
answer✔✔It can be used for CLI commands.
It can be used for XML API.
Q2. The management console supports which two authentication types? (Choose two.) -
answer✔✔RADIUS
TACACS+
Q3. Which two Dynamic Admin Role types are available on the PAN-OS software? (Choose
two.) - answer✔✔superuser
device administrator (read-only)
Q4. Which type of profile does an authentication sequence include? - answer✔✔Authentication
Q5. An Authentication profile includes which other type of profile? - answer✔✔Server
Q6. True or false? Dynamic Admin Roles are called "dynamic" because you can customize them.
- answer✔✔false
Q7. Which profile is used to override global minimum password complexity requirements? -
answer✔✔Password
Q8. What does an application filter enable an administrator to do? - answer✔✔dynamically
categorize multiple applications
Q9. Which two items can be added to an application group? (Choose two.) -
answer✔✔application groups
application filters
Q10. What are two application characteristics? (Choose two.) - answer✔✔excessive bandwidth
use
evasive
, ©THEBRIGHTSTARS 2024
Q.1 What will be the result of one or more occurrences of shadowing? - answer✔✔a warning
Q2. Which column in the Applications and Threats screen includes the options Review Apps and
Review - answer✔✔Action
Q3. Which link can you select in the web interface to minimize the risk of installing new App-ID
updates? - answer✔✔Disable new apps in content update
Q5. Which two protocols are implicitly allowed when you select the facebook-base application?
(Choose two.) - answer✔✔web-browsing
ssl
Q7. What are the two default (predefined) Security policy rule types in PAN-OS software?
(Choose two.) - answer✔✔Interzone
Intrazone
Q8. Which type of Security policy rules most often exist above the two predefined Security
policies? - answer✔✔Universal
Q9. What does the TCP Half Closed setting mean? - answer✔✔maximum length of time that a
session remains in the session table between reception of thefirst FIN and reception of the second
FIN or RST
Q11. Which two HTTP Header Logging options are within a URL Filtering profile? (Choose
two.) - answer✔✔User-Agent
X-Forwarded-For
Q12. What are two source NAT types? (Choose two.) - answer✔✔static
dynamic
Which phrase is a simple way to remember how to configure Security policy rules where NAT
wasimplemented? - answer✔✔pre-NAT IP, post-NAT zone
Q14. What are two types of destination NAT? (Choose two.) - answer✔✔dynamic IP (with
session distribution)
static
Q15. What are two possible values for DIPP (Dynamic IP and Port NAT) oversubscription?
(Choose two.) - answer✔✔1x
4x
