CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Palo Alto Networks
  5. PCNSA

Free PCNSA Exam Braindumps (page: 20)

Page 20 of 98
PDF with 406 Questions

Which protocol is used to map usernames to user groups when User-ID is configured?

  1. TACACS+
  2. SAML
  3. LDAP
  4. RADIUS

Answer(s): C


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/user-id/map-users-to-groups.html



Which definition describes the guiding principle of the zero-trust architecture?

  1. trust, but verify
  2. always connect and verify
  3. never trust, never connect
  4. never trust, always verify

Answer(s): D


Reference:

https://www.paloaltonetworks.com/cyberpedia/what-is-a-zero-trust-architecture



All users from the internal zone must be allowed only Telnet access to a server in the DMZ zone.
Complete the two empty fields in the Security policy rules that permits only this type of access.

Source Zone: Internal -

Destination Zone: DMZ Zone -
Application: _________?
Service: ____________?

Action: allow -
(Choose two.)

  1. Service = ג€application-defaultג€
  2. Service = ג€service-telnetג€
  3. Application = ג€Telnetג€
  4. Application = ג€anyג€

Answer(s): A,C



In which profile should you configure the DNS Security feature?

  1. Anti-Spyware Profile
  2. Zone Protection Profile
  3. Antivirus Profile
  4. URL Filtering Profile

Answer(s): A


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/dns-security/enable-dns-security.html



Page 20 of 98



Post your Comments and Discuss Palo Alto Networks PCNSA exam with other Community members:

Frage commented on June 29, 2024
As an individual I sometimes reflect on the way we do things. And this is one of them. We use exam dumps to pass our exams... the smart way. :-)
Australia
upvote

TGreen commented on June 11, 2024
anyone use these dumps on a recent 2024 exam?
UNITED STATES
upvote

Jonathan commented on April 10, 2024
Question 207 answer is incorrect. In the security policy rule, source IP should be IOT/Guest Zone and Trust Zone, not the subnet in the DMZ zone. (Answer B)
SINGAPORE
upvote

Abdullah commented on September 29, 2023
good morning
Anonymous
upvote

ethiopia commented on August 02, 2023
seems good..
ETHIOPIA
upvote

A\MAM commented on June 27, 2023
q-6 ans-b correct. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-cli-quick-start/use-the-cli/commit-configuration-changes
UNITED STATES
upvote

Tanveer Ansari commented on October 10, 2023
Good content and very helpful exam dumps
Anonymous
upvote

Fa commented on September 02, 2023
Good morning
Anonymous
upvote

ethiopia commented on August 02, 2023
seems good..
ETHIOPIA
upvote

walyra commented on July 09, 2023
Q-4 ans Q-4 ans (A) correct
Anonymous
upvote

A\MAM commented on June 27, 2023
Q-6 Ans-B correct. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-cli-quick-start/use-the-cli/commit-configuration-changes
UNITED STATES
upvote

Dequarius commented on March 05, 2023
Good content and very helpful exam dumps. I stuided for 4 days, made sure to get a 85+ passing mark using the Xengien App free software. Then I booked my certification exam. Passed it on the first go.
AUSTRALIA
upvote

Robyn commented on February 03, 2023
Very easy purchase process. I have not got a chance to install the Test Engine or the Xengine App but the PDF looks good enough for me.
UNITED KINGDOM
upvote

Boyaan commented on November 01, 2022
I am happy to tell you that I passed my exam today with very good score.
TURKEY
upvote

Lenny commented on October 19, 2022
Many thanks to you and your product. It was the main factor in passing my exam. Very greatful to you guys.
AUSTRALIA
upvote

Soumya commented on August 16, 2022
I got 890/1000 in my exam today.
INDIA
upvote

Mr. ExamTaker commented on May 30, 2021
I love the payment process. They do not ask for any name or address. I am a sucker for privacy.
UNITED KINGDOM
upvote