PCNSA EXAM 2025 QUESTIONS AND CORRECT ANSWER Which firewall plane provides configuration, logging, and reporting functions on a separate processor? - answer>>>Control plane Which two activities are part of the cyberattack lifecycle Reconnaissance stage? - answer>>>ports scans, social engineering At which cyberattack lifecycle stage does the attacker achieve "hands on keyboard" control of the target device? - answer>>>C2 Which two characteristics are common among commodity threats? - answer>>>They are pervasive, they are often used as part of an APT At which packet flow stage does the firewall detect and block pre-session reconnaissance and DoS attacks? - answer>>>Ingress Which two items are required match criteria in a Palo Alto Networks Security policy rule? - answer>>>source zone, destination zone Which type of Security policy rule is the default rule type? - answer>>>Universal Which action in a Security policy rule results in traffic being silently rejected? - answer>>>Drop NAT oversubscription is used in conjunction with which NAT translation type? - answer>>>dynamic IP and port True or false? Logging on intrazone-default and interzone-default Security policy rules is enabled by default. - answer>>>False True or false? The implementation of network segmentation and security zones can reduce your network's attack surface. - answer>>>TrueWhich protection method can