Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 116–120 (page: 25)

Updated On: 10-Feb-2026

Palo Alto Networks firewall architecture accelerates content inspection performance while minimizing latency using which two components? (Choose two.)

  1. Network Processing Engine
  2. Policy Engine
  3. Parallel Processing Hardware
  4. Single Stream-based Engine

Answer(s): C,D



An administrator is reviewing another administrator's Security policy log settings.
Which log setting configuration is consistent with best practices for normal traffic?

  1. Log at Session Start and Log at Session End both enabled
  2. Log at Session Start enabled, Log at Session End disabled
  3. Log at Session Start disabled, Log at Session End enabled
  4. Log at Session Start and Log at Session End both disabled

Answer(s): C


Reference:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clt5CAC



Which Security profile would you apply to identify infected hosts on the protected network using DNS traffic?

  1. URL filtering
  2. vulnerability protection
  3. anti-spyware
  4. antivirus

Answer(s): C


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-profiles



Given the topology, which zone type should zone A and zone B to be configured with?

  1. Layer3
  2. Ethernet
  3. Layer2
  4. Virtual Wire

Answer(s): A



Assume a custom URL Category Object of `NO-FILES` has been created to identify a specific website.
How can file uploading/downloading be restricted for the website while permitting general browsing access to that website?

  1. Create a Security policy with a URL Filtering profile that references the site access setting of block to NO-FILES.
  2. Create a Security policy that references NO-FILES as a URL Category qualifier with an appropriate File Blocking profile.
  3. Create a Security policy with a URL Filtering profile that references the site access setting of continue to NO-FILES.
  4. Create a Security policy that references NO-FILES as a URL Category qualifier with an appropriate Data Filtering profile.

Answer(s): B


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/set-up-file-blocking



Viewing page 25 of 79
Viewing questions 121 - 125 out of 420 questions


Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!