NETSEC-ANALYST Exam Questions

What two authentication methods on the Palo Alto Networks firewalls support authentication and authorization for role-based access control? (Choose two.)

Which DNS Query action is recommended for traffic that is allowed by Security policy and matches Palo Alto Networks Content DNS Signatures?

Which stage of the cyber-attack lifecycle makes it important to provide ongoing education to users on spear phishing links, unknown emails, and risky websites?

What are three factors that can be used in domain generation algorithms? (Choose three.)

Which action would an administrator take to ensure that a service object will be available only to the selected device group?

If using group mapping with Active Directory Universal Groups, what must you do when configuring the User-ID?

Which administrative management services can be configured to access a management interface?

Which feature would be useful for preventing traffic from hosting providers that place few restrictions on content, whose services are frequently used by attackers to distribute il...

Which attribute can a dynamic address group use as a filtering condition to determine its membership?

View the diagram. What is the most restrictive yet fully functional rule to allow general Internet and SSH traffic into both the DMZ and Untrust/lnternet zones from each of the lOT...

An administrator needs to add capability to perform real-time signature lookups to block or sinkhole all known malware domains. Which type of single unified engine will get this re...

Which solution is a viable option to capture user identification when Active Directory is not in use?

You receive notification about a new malware that infects hosts. An infection results in the infected host attempting to contact a command-and-control server. Which Security Profil...

Which built-in IP address EDL would be useful for preventing traffic from IP addresses that are verified as unsafe based on WildFire analysis Unit 42 research and data gathered fro...

The compliance officer requests that all evasive applications need to be blocked on all perimeter firewalls out to the internet. The firewall is configured with two zones: 1. trust...

What must be configured before setting up Credential Phishing Prevention?

What allows a security administrator to preview the Security policy rules that match new application signatures?

Which statement best describes a common use of Policy Optimizer?

An address object of type IP Wildcard Mask can be referenced in which part of the configuration?

An administrator would like to determine the default deny action for the application dns-over- https. Which action would yield the information?

An administrator needs to create a Security policy rule that matches DNS traffic within the LAN zone, and also needs to match DNS traffic within the DMZ zone. The administrator doe...

What are three valid ways to map an IP address to a username? (Choose three.)

Which object would an administrator create to enable access to all applications in the office- programs subcategory?

An administrator would like to create a URL Filtering log entry when users browse to any gambling website. What combination of Security policy and Security profile actions is corre...

Which statement is true regarding NAT rules?

After making multiple changes to the candidate configuration of a firewall, the administrator would like to start over with a candidate configuration that matches the running confi...

An administrator is reviewing the Security policy rules shown in the screenshot below. Which statement is correct about the information displayed?

What are the two default behaviors for the intrazone-default policy? (Choose two.)

What are two valid selections within an Antivirus profile? (Choose two.)

An administrator wants to create a NAT policy to allow multiple source IP addresses to be translated to the same public IP address. What is the most appropriate NAT policy to achie...

Which action can be set in a URL Filtering Security profile to provide users temporary access to all websites in a given category using a provided password?

What is a function of application tags?

What are three Palo Alto Networks best practices when implementing the DNS Security Service? (Choose three.)

An administrator is investigating a log entry for a session that is allowed and has the end reason of aged-out. Which two fields could help in determining if this is normal? (Choos...

What does an application filter help you to do?

Prior to a maintenance-window activity, the administrator would like to make a backup of only the running configuration to an external location. What command in Device > Setup > Op...

Your company is highly concerned with their Intellectual property being accessed by unauthorized resources. There is a mature process to store and include metadata tags for all con...

An administrator wants to create a No-NAT rule to exempt a flow from the default NAT rule. What is the best way to do this?

When creating a Panorama administrator type of Device Group and Template Admin, which two things must you create first? (Choose two.)

An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. T...

An administrator is configuring a NAT rule. At a minimum, which three forms of information are required? (Choose three.)

What are three characteristics of the Palo Alto Networks DNS Security service? (Choose three.)

What are the requirements for using Palo Alto Networks EDL Hosting Sen/ice?

An administrator would like to block access to a web server, while also preserving resources and minimizing half-open sockets. What are two security policy actions the administrato...

An administrator would like to apply a more restrictive Security profile to traffic for file sharing applications. The administrator does not want to update the Security policy or...

A network administrator is required to use a dynamic routing protocol for network connectivity. Which three dynamic routing protocols are supported by the NGFW Virtual Router for t...

Which log type would be used to find commit entries for a firewall?

Drag and Drop Question Match each rule type with its example. Answer:

To use Active Directory to authenticate administrators, which server profile is required in the authentication profile?

Which three filter columns are available when setting up an Application Filter? (Choose three.)