Free PCNSA Exam Braindumps
Palo Alto Networks Certified Network Security Administrator Questions 191–195 (page: 40)

Updated On: 10-Feb-2026

An address object of type IP Wildcard Mask can be referenced in which part of the configuration?

  1. Security policy rule
  2. ACC global fitter
  3. NAT address pool
  4. external dynamic list

Answer(s): C



You receive notification about a new malware that infects hosts. An infection results in the infected host attempting to contact command-and-control server.
Which Security Profile, when applied to outbound Security policy rules, detects and prevents this threat from establishing a command-and-control connection?

  1. Anti-Spyware Profile
  2. Data Filtering Profile
  3. Antivirus Profile
  4. Vulnerability Protection Profile

Answer(s): B



Which Palo Alto Networks component provides consolidated policy creation?

  1. Policy Optimizer
  2. Prisma SaaS
  3. GlobalProtect
  4. Panorama

Answer(s): D



An administrator needs to create a Security policy rule that matches DNS traffic within the LAN zone, and also needs to match DNS traffic within the DMZ zone.
The administrator does not want to allow traffic between the DMZ and LAN zones.
Which Security policy rule type should they use?

  1. interzone
  2. intrazone
  3. default
  4. universal

Answer(s): D



According to best practices, how frequently should WildFire updates he made to perimeter firewalls?

  1. every 10 minutes
  2. every minute
  3. every 5 minutes
  4. in real time

Answer(s): D



Viewing page 40 of 79
Viewing questions 196 - 200 out of 420 questions


Post your Comments and Discuss Palo Alto Networks PCNSA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!