Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 81–85 (page: 18)

Updated On: 10-Feb-2026

Which two statements are true for the DNS Security service introduced in PAN-OS version 9.0? (Choose two.)

  1. It is automatically enabled and configured.
  2. It eliminates the need for dynamic DNS updates.
  3. It functions like PAN-DB and requires activation through the app portal.
  4. It removes the 100K limit for DNS entries for the downloaded DNS updates.

Answer(s): A,B



Which two features can be used to tag a username so that it is included in a dynamic user group? (Choose two.)

  1. GlobalProtect agent
  2. XML API
  3. User-ID Windows-based agent
  4. log forwarding auto-tagging

Answer(s): B,D



The CFO found a malware infected USB drive in the parking lot, which when inserted infected their corporate laptop. The malware contacted a known command- and-control server, which caused the infected laptop to begin exfiltrating corporate data.
Which security profile feature could have been used to prevent the communication with the command-and-control server?

  1. Create an anti-spyware profile and enable DNS Sinkhole feature.
  2. Create an antivirus profile and enable its DNS Sinkhole feature.
  3. Create a URL filtering profile and block the DNS Sinkhole URL category
  4. Create a Data Filtering Profiles and enable its DNS Sinkhole feature.

Answer(s): D



You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?

  1. virtual router
  2. Admin Role profile
  3. DNS proxy
  4. service route

Answer(s): C


Reference:

https://weberblog.net/palo-alto-dns-proxy-for-management-services/



Which component provides network security for mobile endpoints by inspecting traffic routed through gateways?

  1. Prisma SaaS
  2. GlobalProtect
  3. AutoFocus
  4. Panorama

Answer(s): B


Reference:

https://www.paloaltonetworks.com/resources/whitepapers/protecting-the-extended-perimeter-with-globalprotect-cloud-service-full



Viewing page 18 of 79
Viewing questions 86 - 90 out of 420 questions


Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!