NETSEC-ANALYST Exam Questions

Which profile should be used to obtain a verdict regarding analyzed files?

In which three places on the PAN-OS interface can the application characteristics be found? (Choose three.)

Where within the firewall GUI can an administrator create a local user database?

How are service routes used in PAN-OS?

How can a complete overview of the logs be displayed to an administrator who has permission in the system to view them?

Which User Credential Detection method should be applied within a URL Filtering Security profile to check for the submission of a valid corporate username and the associated passwo...

Which step is mandatory to create a static route in PAN-OS?

Which security profile should be used to classify malicious web content?

A systems administrator momentarily loses track of which is the test environment firewall and which is the production firewall. The administrator makes changes to the candidate con...

An administrator is implementing an exception to an external dynamic list by adding an entry to the list manually. The administrator wants to save the changes, but the OK button is...

Which three Ethernet interface types are configurable on the Palo Alto Networks firewall? (Choose three.)

A network security manager is asked to save a configuration to be used after a firewall reboot. When the configuration is ready, how should it be saved so that the changes are not...

Which action should be taken to identify threats that have been detected by using inline cloud analysis?

What are three valid source or D=destination conditions available as Security policy qualifiers? (Choose three.)

Which path in PAN-OS 11.x would you follow to see how new and modified App-IDs impact a Security policy?

What are three configurable interface types for a data-plane ethernet interface? (Choose three.)

all other sites in the same category. Which object should the administrator create to use as a match condition for the security policy

Files are sent to the WildFire cloud service via the WildFire Analysis Profile. How are these files used?

Which feature enables an administrator to review the Security policy rule base for unused rules?

What is a default setting for NAT Translated Packets when the destination NAT translation is selected as Dynamic IP (with session distribution)?

Which table for NAT and NPTv6 (IPv6-to-IPv6 Network Prefix Translation) settings is available only on Panorama?

Which action can be performed when grouping rules by group tags?

Which two DNS policy actions in the anti-spyware security profile can prevent hacking attacks through DNS queries to malicious domains? (Choose two.)

What is the best-practice approach to logging traffic that traverses the firewall?

In which two types of NAT can oversubscription be used? (Choose two.)

Where in the PAN-OS GUI can an administrator monitor the rule usage for a specified period of time?

In order to attach an Antivirus, Anti-Spyware and Vulnerability Protection security profile to your Security Policy rules, which setting must be selected?

Within a WildFire Analysis Profile, what match criteria can be defined to forward samples for analysis?

What must first be created on the firewall for SAML authentication to be configured?

Which two options does the firewall use to dynamically populate address group members? (Choose two.)

What two actions can be taken when implementing an exception to an External Dynamic List? (Choose two.)

Which feature enables an administrator to review the Security policy rule base for unused rules?

An administrator should filter NGFW traffic logs by which attribute column to determine if the entry is for the start or end of the session?

Which CLI command will help confirm if FQDN objects are resolved in the event there is a shadow rule?

In the PAN-OS Web Interface, which is a session distribution method offered under NAT Translated Packet Tab to choose how the firewall assigns sessions?