Palo Alto Networks PCNSA Practice Exams
Last updated on Oct 23,2026- Exam Code: PCNSA
- Exam Name: Palo Alto Networks Certified Network Security Administrator
- Certification Provider: Palo Alto Networks
- Latest update: Oct 23,2026
Employees are shown an application block page when they try to access YouTube.
Which security policy is blocking the YouTube application?
- A . intrazone-default
- B . Deny Google
- C . allowed-security services
- D . interzone-default
Employees are shown an application block page when they try to access YouTube.
Which security policy is blocking the YouTube application?
- A . intrazone-default
- B . Deny Google
- C . allowed-security services
- D . interzone-default
Which three filter columns are available when setting up an Application Filter? (Choose three.)
- A . Parent App
- B . Category
- C . Risk
- D . Standard Ports
- E . Subcategory
Which Security profile can be used to configure sinkhole IPs m the DNS Sinkhole settings?
- A . Vulnerability Protection
- B . Anti-Spyware
- C . Antivirus
- D . URL Filtering
Based on the Security policy rules shown, SSH will be allowed on which port?
- A . the default port
- B . only ephemeral ports
- C . any port
- D . same port as ssl and snmpv3
Ethernet 2/1 has an IP Address of 10.0.1.2 in Zone ‘trust’ (LAN).
If both interfaces are connected to the same virtual router, which IP address information will an administrator need to enter in the Destination field to access the internet?
- A . 0.0.0.0
- B . 10.0.2.1/32
- C . 10.0.1.254/32
- D . 0.0.0.0/0
A Heatmap provides an adoption rate for which three features? (Choose three.)
- A . WildFire
- B . Traps
- C . File Blocking
- D . User-ID
- E . SSL certificates
- F . authentication profiles
A Heatmap provides an adoption rate for which three features? (Choose three.)
- A . WildFire
- B . Traps
- C . File Blocking
- D . User-ID
- E . SSL certificates
- F . authentication profiles
With the DNS Security subscription, when will the cloud-based signature database provide users access to newly added DNS signatures?
- A . Within five minutes, after downloading updates
- B . Instantly, after downloading updates
- C . Within five minutes, without downloading updates
- D . Instantly, without downloading updates
Which Security profile must be added to Security policies to enable DNS Signatures to be checked?
- A . URL Filtering
- B . Vulnerability Protection
- C . Anti-Spyware
- D . Antivirus