PCNSA Exam Questions and Answers | Exam-Dumps.net (Page: 3)

QUESTION: 11

Which User-ID mapping method should be used for an environment with users that do not authenticate to Active Directory?

Windows session monitoring
passive server monitoring using the Windows-based agent
Captive Portal
passive server monitoring using a PAN-OS integrated User-ID agent

Answer(s): C

QUESTION: 12

An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

Create an Application Filter and name it Office Programs, then filter it on the business-systems category, office-programs subcategory
Create an Application Group and add business-systems to it
Create an Application Filter and name it Office Programs, then filter it on the business-systems category
Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office

Answer(s): A

Reveal Solution Next Question

QUESTION: 13

Which statement is true regarding a Best Practice Assessment?

The BPA tool can be run only on firewalls
It provides a percentage of adoption for each assessment area
The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus prevention activities
It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

Answer(s): B

Reference:

https://docs.paloaltonetworks.com/best-practices/8-1/data-center-best-practices/data-center-best-practice-security-policy/use-palo-alto-networks- assessment-and-review-tools

Reveal Solution Next Question

QUESTION: 14

Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

intrazone-default
Deny Google
allowed-security services
interzone-default

Answer(s): D

Reveal Solution Next Question

QUESTION: 15

Choose the option that correctly completes this statement. A Security Profile can block or allow traffic ____________.

on either the data place or the management plane.
after it is matched by a security policy rule that allows traffic.
before it is matched to a Security policy rule.
after it is matched by a security policy rule that allows or blocks traffic.

Answer(s): D

Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-policy.html

Reveal Solution Next Question

Palo Alto Networks PCNSA Exam (page: 3) Palo Alto Networks Certified Network Security Administrator Updated on: 29-Aug-2025

QUESTION: 11

QUESTION: 12

QUESTION: 13

Reference:

QUESTION: 14

QUESTION: 15

Reference:

Palo Alto Networks PCNSA Exam (page: 3)
Palo Alto Networks Certified Network Security Administrator
Updated on: 29-Aug-2025