Palo Alto Networks PCNSA Practice Exams
Last updated on Oct 22,2026- Exam Code: PCNSA
- Exam Name: Palo Alto Networks Certified Network Security Administrator
- Certification Provider: Palo Alto Networks
- Latest update: Oct 22,2026
You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?
- A . virtual router
- B . Admin Role profile
- C . DNS proxy
- D . service route
An internal host wants to connect to servers of the internet through using source NAT.
Which policy is required to enable source NAT on the firewall?
- A . post-NAT policy with external source and any destination address
- B . NAT policy with no source of destination zone selected
- C . NAT policy with source zone and destination zone specified
- D . pre-NAT policy with external source and any destination address
Based on the screenshot, what is the purpose of the Included Groups?
- A . They are groups that are imported from RADIUS authentication servers.
- B . They are the only groups visible based on the firewall’s credentials.
- C . They contain only the users you allow to manage the firewall.
- D . They are used to map users to groups.
Which dynamic update type includes updated anti-spyware signatures?
- A . PAN-DB
- B . Applications and Threats
- C . GlobalProtect Data File
- D . Antivirus
Which feature dynamically analyzes and detects malicious content by evaluating various web page details using a series of machine learning (ML) models?
- A . Antivirus Inline ML
- B . URL Filtering Inline ML
- C . Anti-Spyware Inline ML
- D . WildFire Inline ML
To protect against illegal code execution, which Security profile should be applied?
- A . Antivirus profile on allowed traffic
- B . Antivirus profile on denied traffic
- C . Vulnerability Protection profile on allowed traffic
- D . Vulnerability Protection profile on denied traffic
Which action column is available to edit in the Action tab of an Antivirus security profile?
- A . Virus
- B . Signature
- C . Spyware
- D . Trojan
Within the WildFire Analysis profile, which three items are configurable? (Choose three.)
- A . FileType
- B . Direction
- C . Service
- D . Application
- E . Objects
An administrator is reviewing another administrator’s Security policy log settings.
Which log setting configuration is consistent with best practices for normal traffic?
- A . Log at Session Start and Log at Session End both enabled
- B . Log at Session Start enabled, Log at Session End disabled
- C . Log at Session Start disabled, Log at Session End enabled
- D . Log at Session Start and Log at Session End both disabled
What are three DNS policy actions? (Choose three.)
- A . Block
- B . Allow
- C . Strict
- D . Sinkhole
- E . Alert