Palo Alto Networks PCNSA Practice Exams
Last updated on Oct 23,2026- Exam Code: PCNSA
- Exam Name: Palo Alto Networks Certified Network Security Administrator
- Certification Provider: Palo Alto Networks
- Latest update: Oct 23,2026
Based on the screenshot presented, which column contains the link that when clicked, opens a window to display all applications matched to the policy rule?
- A . Apps Allowed
- B . Service
- C . Name
- D . Apps Seen
The PowerBall Lottery has reached a high payout amount and a company has decided to help employee morale by allowing employees to check the number, but doesn’t want to unblock the gambling URL category.
Which two methods will allow the employees to get to the PowerBall Lottery site without the company unlocking the gambling URL category? (Choose two.)
- A . Add all the URLs from the gambling category except powerball.com to the block list and then set the action for the gambling category to allow.
- B . Manually remove powerball.com from the gambling URL category.
- C . Add *.powerball.com to the allow list
- D . Create a custom URL category called PowerBall and add *.powerball.com to the category and set the action to allow.
Which protocol is used to map usernames to user groups when User-ID is configured?
- A . SAML
- B . RADIUS
- C . TACACS+
- D . LDAP
Which statement is true regarding a Best Practice Assessment?
- A . The BPA tool can be run only on firewalls
- B . It provides a percentage of adoption for each assessment data
- C . The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus prevention activities
- D . It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture
Which path is used to save and load a configuration with a Palo Alto Networks firewall?
- A . Device>Setup>Services
- B . Device>Setup>Management
- C . Device>Setup>Operations
- D . Device>Setup>Interfaces
Which plane on a Palo Alto Networks Firewall provides configuration, logging, and reporting functions on a separate processor?
- A . data
- B . network processing
- C . management
- D . security processing
What do you configure if you want to set up a group of objects based on their ports alone?
- A . address groups
- B . custom objects
- C . application groups
- D . service groups
Which two firewall components enable you to configure SYN flood protection thresholds? (Choose two.)
- A . QoS profile
- B . DoS Protection profile
- C . Zone Protection profile
- D . DoS Protection policy
An administrator needs to add capability to perform real-time signature lookups to block or sinkhole all known malware domains.
Which type of single unified engine will get this result?
- A . User-ID
- B . App-ID
- C . Security Processing Engine
- D . Content-ID
Which two Security profile actions can only be applied to DoS Protection profiles? (Choose two.)
- A . Reset-server
- B . Reset-both
- C . SYN cookies
- D . Random Early Drop