PCNSA Practice Test

Review 420 PCNSA practice questions with answer explanations and community insights.

Question 1

Match the Palo Alto Networks Security Operating Platform architecture to its description. Select and Place:

Question 2

Which plane on a Palo Alto Networks Firewall provides configuration, logging, and reporting functions on a separate processor?

  1. management
  2. network processing
  3. data
  4. security processing

Question 3

A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base. On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days. Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

  1. All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application
  2. No impact because the apps were automatically downloaded and installed
  3. No impact because the firewall automatically adds the rules to the App-ID interface
  4. All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until the security administrator approves the applications

Question 4

How many zones can an interface be assigned with a Palo Alto Networks firewall?

  1. two
  2. three
  3. four
  4. one

Question 5

Which two configuration settings shown are not the default? (Choose two.)

  1. Enable Security Log
  2. Server Log Monitor Frequency (sec)
  3. Enable Session
  4. Enable Probing