Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 76–80 (page: 17)

Updated On: 10-Feb-2026

Which data flow direction is protected in a zero-trust firewall deployment that is not protected in a perimeter-only firewall deployment?

  1. north-south
  2. inbound
  3. outbound
  4. east-west

Answer(s): D



Which protocol is used to map usernames to user groups when User-ID is configured?

  1. TACACS+
  2. SAML
  3. LDAP
  4. RADIUS

Answer(s): C


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/user-id/map-users-to-groups.html



Which definition describes the guiding principle of the zero-trust architecture?

  1. trust, but verify
  2. always connect and verify
  3. never trust, never connect
  4. never trust, always verify

Answer(s): D


Reference:

https://www.paloaltonetworks.com/cyberpedia/what-is-a-zero-trust-architecture



All users from the internal zone must be allowed only Telnet access to a server in the DMZ zone.
Complete the two empty fields in the Security policy rules that permits only this type of access.

Source Zone: Internal -

Destination Zone: DMZ Zone -
Application: _________?
Service: ____________?

Action: allow -
(Choose two.)

  1. Service = ג€application-defaultג€
  2. Service = ג€service-telnetג€
  3. Application = ג€Telnetג€
  4. Application = ג€anyג€

Answer(s): A,C



In which profile should you configure the DNS Security feature?

  1. Anti-Spyware Profile
  2. Zone Protection Profile
  3. Antivirus Profile
  4. URL Filtering Profile

Answer(s): A


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/dns-security/enable-dns-security.html



Viewing page 17 of 79
Viewing questions 81 - 85 out of 420 questions


Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!