Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 151–155 (page: 32)

Updated On: 10-Feb-2026

You receive notification about new malware that infects hosts through malicious files transferred by FTP.
Which Security profile detects and protects your internal networks from this threat after you update your firewall's threat signature database?

  1. URL Filtering profile applied to inbound Security policy rules.
  2. Data Filtering profile applied to outbound Security policy rules.
  3. Antivirus profile applied to inbound Security policy rules.
  4. Vulnerability Protection profile applied to outbound Security policy rules.

Answer(s): C


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-profiles



An administrator wants to prevent access to media content websites that are risky.
Which two URL categories should be combined in a custom URL category to accomplish this goal? (Choose two.)

  1. recreation-and-hobbies
  2. streaming-media
  3. known-risk
  4. high-risk

Answer(s): B,D



Which dynamic update type includes updated anti-spyware signatures?

  1. PAN-DB
  2. Applications and Threats
  3. GlobalProtect Data File
  4. Antivirus

Answer(s): B



An administrator would like to silently drop traffic from the internet to a ftp server.
Which Security policy action should the administrator select?

  1. Drop
  2. Deny
  3. Block
  4. Reset-server

Answer(s): A



Which object would an administrator create to block access to all high-risk applications?

  1. HIP profile
  2. Vulnerability Protection profile
  3. application group
  4. application filter

Answer(s): D


Reference:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClKECA0



Viewing page 32 of 79
Viewing questions 156 - 160 out of 420 questions


Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!