PCNSA Free Practice Test

How frequently can wildfire updates be made available to firewalls?

1. A. every 15 minutes
2. B. every 30 minutes
3. C. every 60 minutes
4. D. every 5 minutes

Correct Answer: D

Identify the correct order to configure the PAN-OS integrated USER-ID agent.
* 3. add the service account to monitor the server(s)
* 2. define the address of the servers to be monitored on the firewall
* 4. commit the configuration, and verify agent connection status
* 1. create a service account on the Domain Controller with sufficient permissions to execute the User- ID agent

1. A. 2-3-4-1
2. B. 1-4-3-2
3. C. 3-1-2-4
4. D. 1-3-2-4

Correct Answer: D

An administrator has an IP address range in the external dynamic list and wants to create an exception for one specific IP address in this address range.
Which steps should the administrator take?

1. A. Add the address range to the Manual Exceptions list and exclude the IP address by selecting the entry.
2. B. Add each IP address in the range as a list entry and then exclude the IP address byadding it to the Manual Exceptions list.
3. C. Select the address range in the List Entries lis
4. D. A column will open with the IP addresse
5. E. Select the entry to exclude.
6. F. Add the specific IP address from the address range to the Manual Exceptions list by using regular expressions to define the entry.

Correct Answer: D

Which firewall plane provides configuration, logging, and reporting functions on a separate processor?

1. A. control
2. B. network processing
3. C. data
4. D. security processing

Correct Answer: A

Which two statements are true for the DNS security service introduced in PAN-OS version 10.0?

1. A. It functions like PAN-DB and requires activation through the app portal.
2. B. It removes the 100K limit for DNS entries for the downloaded DNS updates.
3. C. IT eliminates the need for dynamic DNS updates.
4. D. IT is automatically enabled and configured.

Correct Answer: AB