Palo Alto Networks PCNSA Palo Alto Networks Certified Network Security Administrator Exam Practice Test

Page: 1 / 14
Total 362 questions
Question 1

What is the main function of the Test Policy Match function?



Answer : D


Question 2

View the diagram. What is the most restrictive, yet fully functional rule, to allow general Internet and SSH traffic into both the DMZ and Untrust/lnternet zones from each of the lOT/Guest and Trust Zones?

A)

B)

C)

D)



Answer : C


Question 3

Which type of security rule will match traffic between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?



Question 4

A network administrator created an intrazone Security policy rule on the firewall. The source zones were set to IT. Finance, and HR.

Which two types of traffic will the rule apply to? (Choose two)



Answer : C, D


Question 5

Which operations are allowed when working with App-ID application tags?



Answer : B


Question 6

Which license must an Administrator acquire prior to downloading Antivirus Updates for use with the firewall?



Answer : A


Question 7

Which interface type is used to monitor traffic and cannot be used to perform traffic shaping?



Answer : B


Page:    1 / 14   
Total 362 questions