PCNSA Free Practice Test

Access to which feature requires the PAN-OS Filtering license?

1. A. PAN-DB database
2. B. DNS Security
3. C. Custom URL categories
4. D. URL external dynamic lists

Correct Answer: A
Reference:https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/getting-started/activate-licenses-andsubscriptions.html

A company moved its old port-based firewall to a new Palo Alto Networks NGFW 60 days ago. Which utility should the company use to identify out-of-date or unused rules on the firewall?

1. A. Rule Usage Filter > No App Specified
2. B. Rule Usage Filter >Hit Count > Unused in 30 days
3. C. Rule Usage Filter > Unused Apps
4. D. Rule Usage Filter > Hit Count > Unused in 90 days

Correct Answer: D

When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?

1. A. Translation Type
2. B. Interface
3. C. Address Type
4. D. IP Address

Correct Answer: A

Which information is included in device state other than the local configuration?

1. A. uncommitted changes
2. B. audit logs to provide information of administrative account changes
3. C. system logs to provide information of PAN-OS changes
4. D. device group and template settings pushed from Panorama

Correct Answer: D
Reference:https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device-setup-operations.html

Which administrator type utilizes predefined roles for a local administrator account?

1. A. Superuser
2. B. Role-based
3. C. Dynamic
4. D. Device administrator

Correct Answer: C