Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 131–135 (page: 28)

Updated On: 10-Feb-2026

Based on the screenshot, what is the purpose of the group in User labelled `it`?

  1. Allows ג€anyג€ users to access servers in the DMZ zone.
  2. Allows users to access IT applications on all ports.
  3. Allow users in group ג€itג€ to access IT applications.
  4. Allow users in group ג€DMZג€ to access IT applications.

Answer(s): C



Which action results in the firewall blocking network traffic without notifying the sender?

  1. Drop
  2. Deny
  3. No notification
  4. Reset Client

Answer(s): A



Assume that traffic matches a Security policy rule but the attached Security Profiles is configured to block matching traffic.
Which statement accurately describes how the firewall will apply an action to matching traffic?

  1. If it is a block rule, then Security Profile action is applied last.
  2. If it is an allow rule, then the Security policy rule is applied last.
  3. If it is a block rule, then the Security policy rule action is applied last.
  4. If it is an allowed rule, then the Security Profile action is applied last.

Answer(s): D



Which Security profile can you apply to protect against malware such as worms and Trojans?

  1. antivirus
  2. data filtering
  3. vulnerability protection
  4. anti-spyware

Answer(s): A


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-profiles#:~:text=Antivirus%20profiles%20protect%20against%20viruses,as%20well%20as%20spyware%20downloads.



Given the network diagram, traffic should be permitted for both Trusted and Guest users to access general Internet and DMZ servers using SSH, web-browsing and SSL applications.
Which policy achieves the desired results?





Answer(s): B



Viewing page 28 of 79
Viewing questions 136 - 140 out of 420 questions


Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!