2026年にPCNSAの合格を目指すなら、教材選びから学習、模擬試験まで一か所で完結するPassTestをご活用ください。Palo Alto Networks Certified Network Security Administratorの対策に必要な360問の練習問題と各種サポートがそろっています。

Palo Alto Networks PCNSA 試験概要:

Palo Alto Networks PCNSA 試験シラバストピック:

Palo Alto Networks Certified Network Security Administratorの疑問にお答えします

Palo Alto Networks Certified Network Security Administrator 認定 PCNSA 試験問題：

問題 #1

Which protocol used to map username to user groups when user-ID is configured?

A. RADIUS
B. LDAP
C. SAML
D. TACACS+

問題 #2

Which type of administrator account cannot be used to authenticate user traffic flowing through the firewall's data plane?

A. local database user
B. local user
C. SAML user
D. Kerberos user

問題 #3

What are two differences between an implicit dependency and an explicit dependency in App-ID? (Choose two.)

A. An implicit dependency requires the dependent application to be added in the security policy
B. An implicit dependency does not require the dependent application to be added in the security policy
C. An explicit dependency does not require the dependent application to be added in the security policy
D. An explicit dependency requires the dependent application to be added in the security policy

問題 #4

Based on the image provided, which two statements apply to the Security policy rules? (Choose two.)

A. In the Allow-FTP policy, FTP is allowed using App-ID.
B. The Allow-Social-Media rule allows all Facebook functions.
C. The Allow-Office-Programs rule is using an application filter.
D. The Allow-Office-Programs rule is using an application group.

問題 #5

You have been tasked to configure access to a new web server located in the DMZ Based on the diagram what configuration changes are required in the NGFW virtual router to route traffic from the 10 1 1 0/24 network to 192 168 1 0/24?

A. Add a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 172.16.1.2
B. Add a route with the destination of 192 168 1 0/24 using interface Eth 1/2 with a next-hop of 172.16.1.2
C. Add a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of
192.168.1.254
D. Add a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 192.168
1.10

解説：