Palo Alto Networks PCNSA Practice Exams
Last updated on Oct 22,2026- Exam Code: PCNSA
- Exam Name: Palo Alto Networks Certified Network Security Administrator
- Certification Provider: Palo Alto Networks
- Latest update: Oct 22,2026
Which parameter is used to view the Security policy rulebase as groups?
- A . Tags
- B . Service
- C . Type
- D . Action
Which parameter is used to view the Security policy rulebase as groups?
- A . Tags
- B . Service
- C . Type
- D . Action
Why should a company have a File Blocking profile that is attached to a Security policy?
- A . To block uploading and downloading of any type of files
- B . To block uploading and downloading of specific types of files
- C . To detonate files in a sandbox environment
- D . To analyze file types
Why should a company have a File Blocking profile that is attached to a Security policy?
- A . To block uploading and downloading of any type of files
- B . To block uploading and downloading of specific types of files
- C . To detonate files in a sandbox environment
- D . To analyze file types
What is used to monitor Security policy applications and usage?
- A . Security profile
- B . App-ID
- C . Policy-based forwarding
- D . Policy Optimizer
Config logs display entries for which kind of firewall changes?
- A . configuration
- B . system logs
- C . debugs
- D . resets
The PowerBall Lottery has reached an unusually high value this week. Your company has decided to raise morale by allowing employees to access the PowerBall Lottery website (www.powerball.com) for just this week. However, the company does not want employees to access any other websites also listed in the URL filtering "gambling" category.
Which method allows the employees to access the PowerBall Lottery website but without unblocking access to the "gambling" URL category?
- A . Add just the URL www.powerball.com to a Security policy allow rule.
- B . Manually remove powerball.com from the gambling URL category.
- C . Add *.powerball.com to the URL Filtering allow list.
- D . Create a custom URL category, add *.powerball.com to it and allow it in the Security Profile.
Which three types of authentication services can be used to authenticate user traffic flowing through the firewall’s data plane? (Choose three.)
- A . SAML 2.0
- B . Kerberos
- C . TACACS
- D . TACACS+
- E . SAML 1.0
Which three types of authentication services can be used to authenticate user traffic flowing through the firewall’s data plane? (Choose three.)
- A . SAML 2.0
- B . Kerberos
- C . TACACS
- D . TACACS+
- E . SAML 1.0
Drag and Drop Question
Match each feature to the DoS Protection Policy or the DoS Protection Profile.
