PCNSA Free Practice Test

How is the hit count reset on a rule?

1. A. select a security policy rule, right click Hit Count > Reset
2. B. with a dataplane reboot
3. C. Device > Setup > Logging and Reporting Settings > Reset Hit Count
4. D. in the CLI, type command reset hitcount

Correct Answer: A

Where within the firewall GUI can all existing tags be viewed?

1. A. Network > Tags
2. B. Monitor > Tags
3. C. Objects > Tags
4. D. Policies > Tags

Correct Answer: C

If using group mapping with Active Directory Universal Groups, what must you do when configuring the User-ID?

1. A. Create an LDAP Server profile to connect to the root domain of the Global Catalog server on port 3268 or 3269 for SSL
2. B. Configure a frequency schedule to clear group mapping cache
3. C. Configure a Primary Employee ID number for user-based Security policies
4. D. Create a RADIUS Server profile to connect to the domain controllers using LDAPS on port 636 or 389

Correct Answer: B
✑ If you have Universal Groups, create an LDAP server profile to connect to the root domain of the Global Catalog server on port 3268 or 3269 for SSL, then create another LDAP server profile to connect to the root domain controllers on port 389. This helps ensure that users and group information is available for all domains and subdomains.
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/user-id/map-users-to-groups

In a File Blocking profile, which two actions should be taken to allow file types that support critical apps? (Choose two.)

1. A. Clone and edit the Strict profile.
2. B. Use URL filtering to limit categories in which users can transfer files.
3. C. Set the action to Continue.
4. D. Edit the Strict profile.

Correct Answer: AD

An administrator needs to create a Security policy rule that matches DNS traffic within the LAN zone, and also needs to match DNS traffic within the DMZ zone The administrator does not want to allow traffic between the DMZ and LAN zones.
Which Security policy rule type should they use?

1. A. default
2. B. universal
3. C. intrazone
4. D. interzone

Correct Answer: C