Palo Alto Networks Certified Network Security Administrator (PCNSA) Free Practice Exam Questions

364 real Palo Alto Networks Certified Network Security Administrator (PCNSA) exam questions with answers and AI explanations. Palo Alto Networks certification prep — page 28 of 37.

1. Question 311: Which rule type is appropriate for matching traffic occurring within a specified zone?
2. Question 312: By default, which action is assigned to the interzone-default rule?
3. Question 313: If the firewall interface E1/1 is connected to a SPAN or mirror port, which interface type should E1/1 be configured as?
4. Question 314: Which action column is available to edit in the Action tab of an Antivirus security profile?
5. Question 316: Which Security profile prevents users from submitting valid corporate credentials online?
6. Question 317: What are three DNS policy actions? (Choose three.)
7. Question 318: Which System log severity level would be displayed as a result of a user password change?
8. Question 319: An administrator would like to block traffic to all high risk audio streaming applications, including new App-IDs introduced with content updates. Which filter…
9. Question 320: An administrator receives a notification about new malware that is being used to attack hosts. The malware exploits a software bug in a common application. Whi…
10. Question 321: An administrator needs to create a Security policy rule that matches DNS traffic sourced from either the LAN or VPN zones, destined for the DMZ or Untrust zone…