Palo Alto Networks PCNSA Practice Exams
Last updated on Oct 22,2026- Exam Code: PCNSA
- Exam Name: Palo Alto Networks Certified Network Security Administrator
- Certification Provider: Palo Alto Networks
- Latest update: Oct 22,2026
Which file is used to save the running configuration with a Palo Alto Networks firewall?
- A . running-config.xml
- B . run-config.xml
- C . running-configuration.xml
- D . run-configuration.xml
Which file is used to save the running configuration with a Palo Alto Networks firewall?
- A . running-config.xml
- B . run-config.xml
- C . running-configuration.xml
- D . run-configuration.xml
What do Dynamic User Groups help you to do?
- A . create a policy that provides auto-remediation for anomalous user behavior and malicious activity
- B . create a dynamic list of firewall administrators
- C . create a QoS policy that provides auto-remediation for anomalous user behavior and malicious activity
- D . create a policy that provides auto-sizing for anomalous user behavior and malicious activity
What are two differences between an application group and an application filter? (Choose two.)
- A . Application groups enable access to sanctioned applications explicitly, while application filters enable access to sanctioned applications implicitly.
- B . Application groups are static, while application filters are dynamic.
- C . Application groups dynamically group applications based on attributes, while application filters contain applications that are statically grouped.
- D . Application groups can be added to application filters, while application filters cannot be added to application groups.
Which Security profile would you apply to identify infected hosts on the protected network using DNS traffic?
- A . URL traffic
- B . vulnerability protection
- C . anti-spyware
- D . antivirus
Which security profile will provide the best protection against ICMP floods, based on individual combinations of a packet`s source and destination IP address?
- A . DoS protection
- B . URL filtering
- C . packet buffering
- D . anti-spyware
Add the user to the group and click OK.
Where in Panorama would Zone Protection profiles be configured?
- A . Templates
- B . Device Groups
- C . Shared
- D . Panorama tab
Which type of security rule will match traffic between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?
- A . global
- B . intrazone
- C . interzone
- D . universal
Which type of security rule will match traffic between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?
- A . global
- B . intrazone
- C . interzone
- D . universal