support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Palo Alto Networks
  4. PCNSA

Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 141–145 (page: 30)

Updated On: 10-Feb-2026
Page 30 of 79
PDF with 420 Questions

Which component is a building block in a Security policy rule?

  1. decryption profile
  2. destination interface
  3. timeout (min)
  4. application

Answer(s): D


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-web-interface-help/policies/policies-security/building-blocks-in-a-security-policy-rule.html



You have been tasked to configure access to a new web server located in the DMZ.
Based on the diagram what configuration changes are required in the NGFW virtual router to route traffic from the 10.1.1.0/24 network to 192.168.1.0/24?

  1. Add a route with the destination of 192.168.1.0/24 using interface Eth 1/2 with a next-hop of 172.16.1.2.
  2. Add a route with the destination of 192.168.1.0/24 using interface Eth 1/3 with a next-hop of 192.168.1.10
  3. Add a route with the destination of 192.168.1.0/24 using interface Eth 1/3 with a next-hop of 172.16.1.2.
  4. Add a route with the destination of 192.168.1.0/24 using interface Eth 1/3 with a next-hop of 192.168.1.254.

Answer(s): C



An administrator would like to use App-ID's deny action for an application and would like that action updated with dynamic updates as new content becomes available.
Which security policy action causes this?

  1. Reset server
  2. Reset both
  3. Deny
  4. Drop

Answer(s): C



Selecting the option to revert firewall changes will replace what settings?

  1. the candidate configuration with settings from the running configuration
  2. dynamic update scheduler settings
  3. the running configuration with settings from the candidate configuration
  4. the device state with settings from another configuration

Answer(s): D


Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/firewall-administration/manage-configuration-backups/revert-firewall-configuration- changes.html



An administrator has configured a Security policy where the matching condition includes a single application, and the action is drop.
If the application's default deny action is reset-both, what action does the firewall take?

  1. It silently drops the traffic.
  2. It silently drops the traffic and sends an ICMP unreachable code.
  3. It sends a TCP reset to the server-side device.
  4. It sends a TCP reset to the client-side and server-side devices.

Answer(s): D



  PDF
Viewing page 30 of 79
Viewing questions 146 - 150 out of 420 questions


Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!