Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 96–100 (page: 21)

Updated On: 10-Feb-2026

What do Dynamic User Groups help you to do?

  1. create a policy that provides auto-remediation for anomalous user behavior and malicious activity
  2. create a dynamic list of firewall administrators
  3. create a QoS policy that provides auto-remediation for anomalous user behavior and malicious activity
  4. create a policy that provides auto-sizing for anomalous user behavior and malicious activity

Answer(s): A


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/user-id-features/dynamic-user-groups



Which type of security policy rule will match traffic that flows between the Outside zone and inside zone, but would not match traffic that flows within the zones?

  1. global
  2. intrazone
  3. interzone
  4. universal

Answer(s): C



You notice that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would you need to monitor and block to mitigate the malicious activity?

  1. branch office traffic
  2. north-south traffic
  3. perimeter traffic
  4. east-west traffic

Answer(s): D



DRAG DROP (Drag and Drop is not supported)
Match each feature to the DoS Protection Policy or the DoS Protection Profile.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Which type of administrator account cannot be used to authenticate user traffic flowing through the firewall's data plane?

  1. Kerberos user
  2. SAML user
  3. local database user
  4. local user

Answer(s): D



Viewing page 21 of 79
Viewing questions 101 - 105 out of 420 questions


Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!