Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 111–115 (page: 24)

Updated On: 10-Feb-2026

The PowerBall Lottery has reached an unusually high value this week. Your company has decided to raise morale by allowing employees to access the PowerBall Lottery website (www.powerball.com) for just this week. However, the company does not want employees to access any other websites also listed in the URL filtering `gambling` category.
Which method allows the employees to access the PowerBall Lottery website but without unblocking access to the `gambling` URL category?

  1. Add just the URL www.powerball.com to a Security policy allow rule.
  2. Manually remove powerball.com from the gambling URL category.
  3. Add *.powerball.com to the URL Filtering allow list.
  4. Create a custom URL category, add *.powerball.com to it and allow it in the Security Profile.

Answer(s): A



Which Palo Alto Networks service protects cloud-based applications such as Dropbox and Salesforce by monitoring permissions and shares and scanning files for sensitive information?

  1. Prisma SaaS
  2. AutoFocus
  3. Panorama
  4. GlobalProtect

Answer(s): A



In a Security policy, what is the quickest way to reset all policy rule hit counters to zero?

  1. Highlight each rule and use the Reset Rule Hit Counter > Selected Rules
  2. Reboot the firewall
  3. Use the Reset Rule Hit Counter > All Rules option
  4. Use the CLI enter the command reset rules all

Answer(s): C


Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/policies/policies-security/creating-and-managing-policies



Based on the Security policy rules shown, SSH will be allowed on which port?

  1. the default port
  2. only ephemeral ports
  3. any port
  4. same port as ssl and snmpv3

Answer(s): A



You receive notification about new malware that is being used to attack hosts. The malware exploits a software bug in common application.
Which Security Profile detects and blocks access to this threat after you update the firewall's threat signature database?

  1. Data Filtering Profile applied to outbound Security policy rules
  2. Antivirus Profile applied to outbound Security policy rules
  3. Data Filtering Profile applied to inbound Security policy rules
  4. Vulnerability Protection Profile applied to inbound Security policy rules

Answer(s): D



Viewing page 24 of 79
Viewing questions 116 - 120 out of 420 questions


Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!