NETSEC-ANALYST Exam Questions

Where within the firewall GUI can all existing tags be viewed?

What is the Anti-Spyware Security profile default action?

To enable DNS sinkholing, which two addresses should be reserved? (Choose two.)

A NetSec manager was asked to create a new firewall administrator profile with customized privileges. The new firewall administrator must be able to download TSF File and Starts Du...

What must exist in order for the firewall to route traffic between Layer 3 interfaces?

Which path in PAN-OS 10.2 is used to schedule a content update to managed devices using Panorama?

In which threat profile object would you configure the DNS Security service?

Which rule type is appropriate for matching traffic occurring within a specified zone?

Which two matching criteria are used when creating a Security policy involving NAT? (Choose two.)

If a universal security rule was created for source zones A & B and destination zones A & B, to which traffic would the rule apply?

Which interface type requires no routing or switching but applies Security or NAT policy rules before passing allowed traffic?

What is a valid Security Zone type in PAN-OS?

An administrator is creating a Security policy rule and sees that the destination zone is grayed out. While creating the rule, which option was selected to cause this?

How many levels can there be in a device-group hierarchy, below the shared level?

Where in Panorama would Zone Protection profiles be configured?

Which parameter is used to view the Security policy rulebase as groups?

When a security rule is configured as Intrazone, which field cannot be changed?

An administrator is trying to understand which NAT policy is being matched. In what order does the firewall evaluate NAT policies?

Which policy set should be used to ensure that a policy is applied just before the default security rules?

Which rule type is appropriate for matching traffic occurring within a specified zone? How should the administrator configure the firewall to restrict users to specific email appli...

Review the screenshot below. Based on the information it contains, which protocol decoder will detect a machine-learning match, create a Threat log entry, and permit the traffic?

An interface can belong to how many Security Zones?

What are the two types of Administrator accounts? (Choose two.)

The Net Sec Manager asked to create a new Firewall Operator profile with customized privileges. In particular, the new firewall operator should be able to: Check the configuration...

Within the WildFire Analysis profile, which three items are configurable? (Choose three.)

Which Security profile can be used to configure sinkhole IPs m the DNS Sinkhole settings?

Which three management interface settings must be configured for functional dynamic updates and administrative access on a Palo Alto Networks firewall? (Choose three.)

How does the Policy Optimizer policy view differ from the Security policy view?

An administrator creates a new Security policy rule to allow DNS traffic from the LAN to the DMZ zones. The administrator does not change the rule type from its default value. What...

What do application filters help provide access to?

What is the function of an application group object?

How would a Security policy need to be written to allow outbound traffic using Secure Shell (SSH) to destination ports tcp/22 and tcp/4422?

Which type of DNS signatures are used by the firewall to identify malicious and command-and- control domains?

Which Security policy action will message a user's browser that their web session has been terminated?

In order to protect users against exploit kits that exploit a vulnerability and then automatically download malicious payloads, which Security profile should be configured?

Which verdict may be assigned to a WildFire sample?

To protect against illegal code execution, which Security profile should be applied?

Which three types of entries can be excluded from an external dynamic list? (Choose three.)

The Administrator profile "PCNSA Admin" is configured with an Authentication profile "Authentication Sequence PCNSA". The Authentication Sequence PCNSA has a profile list with four...

By default, which action is assigned to the intrazone-default rule?

A Panorama administrator would like to create an address object for the DNS server located in the New York City office, but does not want this object added to the other Panorama ma...

An administrator is troubleshooting an issue with traffic that matches the interzone-default rule, which is set to default configuration. What should the administrator do?

What is the default action for the SYN Flood option within the DoS Protection profile?

Application groups enable access to what?

Where does a user assign a tag group to a policy rule in the policy creation window?

What is used to monitor Security policy applications and usage?

What is considered best practice with regards to committing configuration changes?

Which Security profile generates an alert based on a threshold when the action is set to Alert?

Given the network diagram, which two statements are true about traffic between the User and Server networks? (Choose two.)

Which setting is available to edit when a tag is created on the local firewall?