Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 146–150 (page: 31)

Updated On: 10-Feb-2026

Which three types of authentication services can be used to authenticate user traffic flowing through the firewall's data plane? (Choose three.)

  1. SAML 2.0
  2. Kerberos
  3. TACACS
  4. TACACS+
  5. SAML 1.0

Answer(s): A,B,D



Which objects would be useful for combining several services that are often defined together?

  1. application filters
  2. service groups
  3. shared service objects
  4. application groups

Answer(s): B


Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/objects/objects-services.html



Given the screenshot, what two types of route is the administrator configuring? (Choose two.)

  1. BGP
  2. static route
  3. default route
  4. OSPF

Answer(s): B,C



Which rule type is appropriate for matching traffic both within and between the source and destination zones?

  1. interzone
  2. shadowed
  3. intrazone
  4. universal

Answer(s): A



An administrator would like to override the default deny action for a given application, and instead would like to block the traffic and send the ICMP code `communication with the destination is administratively prohibited`.
Which security policy action causes this?

  1. Drop
  2. Drop, send ICMP Unreachable
  3. Reset both
  4. Reset server

Answer(s): B


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-policy/security-policy-actions.html



Viewing page 31 of 79
Viewing questions 151 - 155 out of 420 questions


Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!