Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 86–90 (page: 19)

Updated On: 10-Feb-2026

For the firewall to use Active Directory to authenticate users, which Server Profile is required in the Authentication Profile?

  1. TACACS+
  2. RADIUS
  3. LDAP
  4. SAML

Answer(s): C


Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/authentication/configure-an-authentication-profile-and-sequence



Which operations are allowed when working with App-ID application tags?

  1. Predefined tags may be deleted.
  2. Predefined tags may be augmented by custom tags.
  3. Predefined tags may be modified.
  4. Predefined tags may be updated by WildFire dynamic updates.

Answer(s): B



Your company occupies one floor in a single building. You have two Active Directory domain controllers on a single network. The firewall's management plane is only slightly utilized.
Which User-ID agent is sufficient in your network?

  1. Windows-based agent deployed on each domain controller
  2. PAN-OS integrated agent deployed on the firewall
  3. Citrix terminal server agent deployed on the network
  4. Windows-based agent deployed on the internal network a domain member

Answer(s): B


Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/user-id/map-ip-addresses-to-users/configure-user-mapping-using-the-windows-user-id- agent/configure-the-windows-based-user-id-agent-for-user-mapping.html



Which type of administrative role must you assign to a firewall administrator account, if the account must include a custom set of firewall permissions?

  1. Role-based
  2. Multi-Factor Authentication
  3. Dynamic
  4. SAML

Answer(s): A


Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/firewall-administration/manage-firewall-administrators/administrative-role-types.html



Which statement is true regarding a Heatmap report?

  1. When guided by authorized sales engineer, it helps determine the areas of greatest security risk
  2. It runs only on firewalls.
  3. It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture.
  4. It provides a percentage of adoption for each assessment area.

Answer(s): D


Reference:

https://live.paloaltonetworks.com/t5/best-practice-assessment-blogs/the-best-practice-assessment-bpa-tool-for-ngfw-and-panorama/ba-p/248343



Viewing page 19 of 79
Viewing questions 91 - 95 out of 420 questions


Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!