Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 126–130 (page: 27)

Updated On: 10-Feb-2026

An administrator would like to see the traffic that matches the interzone-default rule in the traffic logs.
What is the correct process to enable this logging?

  1. Select the interzone-default rule and click Override; on the Actions tab, select Log at Session End and click OK.
  2. Select the interzone-default rule and edit the rule; on the Actions tab, select Log at Session End and click OK.
  3. Select the interzone-default rule and edit the rule; on the Actions tab, select Log at Session Start and click OK.
  4. This rule has traffic logging enabled by default; no further action is required.

Answer(s): B



The Palo Alto Networks NGFW was configured with a single virtual router named VR-1.
What changes are required on VR-1 to route traffic between two interfaces on the NGFW?

  1. Add static routes to route between the two interfaces
  2. Add interfaces to the virtual router
  3. Add zones attached to interfaces to the virtual router
  4. Enable the redistribution profile to redistribute connected routes

Answer(s): B


Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/virtual-routers.html



An administrator wants to prevent users from submitting corporate credentials in a phishing attack.
Which Security profile should be applied?

  1. antivirus
  2. anti-spyware
  3. URL-filtering
  4. vulnerability protection

Answer(s): C


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/prevent-credential-phishing/set-up-credential-phishing- prevention.html#idc77030dc-6022-4458-8c50-1dc0fe7cffe4



Which two rule types allow the administrator to modify the destination zone? (Choose two.)

  1. interzone
  2. shadowed
  3. intrazone
  4. universal

Answer(s): A,D


Reference:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClomCAC



What is the main function of Policy Optimizer?

  1. reduce load on the management plane by highlighting combinable security rules
  2. migrate other firewall vendors' security rules to Palo Alto Networks configuration
  3. eliminate ג€Log at Session Startג€ security rules
  4. convert port-based security rules to application-based security rules

Answer(s): D


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/app-id-features/policy-optimizer.html



Viewing page 27 of 79
Viewing questions 131 - 135 out of 420 questions


Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!