Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 166–170 (page: 35)

Updated On: 10-Feb-2026

URL categories can be used as match criteria on which two policy types? (Choose two.)

  1. authentication
  2. decryption
  3. application override
  4. NAT

Answer(s): A,B


Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/url-filtering-concepts/url-category-as-policy-match-criteria.html



Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

  1. The web session was unsuccessfully decrypted.
  2. The traffic was denied by security profile.
  3. The traffic was denied by URL filtering.
  4. The web session was decrypted.

Answer(s): C,D



Refer to the exhibit.



An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.

Which two Security policy rules will accomplish this configuration? (Choose two.)

  1. Untrust (Any) to DMZ (1.1.1.100), ssh - Allow
  2. Untrust (Any) to Untrust (10.1.1.1), web-browsing - Allow
  3. Untrust (Any) to Untrust (10.1.1.1), ssh - Allow
  4. Untrust (Any) to DMZ (10.1.1.100, 10.1.1.101), ssh, web-browsing - Allow
  5. Untrust (Any) to DMZ (1.1.1.100), web-browsing - Allow

Answer(s): A,E



Which type of profile must be applied to the Security policy rule to protect against buffer overflows, illegal code execution, and other attempts to exploit system flaws?

  1. URL filtering
  2. vulnerability protection
  3. file blocking
  4. anti-spyware

Answer(s): B


Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/objects/objects-security-profiles-vulnerability-protection.html



Starting with PAN-OS version 9.1, application dependency information is now reported in which two locations? (Choose two.)

  1. on the App Dependency tab in the Commit Status window
  2. on the Policy Optimizer's Rule Usage page
  3. on the Application tab in the Security Policy Rule creation window
  4. on the Objects > Applications browser pages

Answer(s): A,C


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/app-id/use-application-objects-in-policy/resolve-application-dependencies.html



Viewing page 35 of 79
Viewing questions 171 - 175 out of 420 questions


Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!