NETSEC-GENERALIST Practice Questions

An administrator has imported a pair of firewalls to Panorama under the same template stack. As a part of the template stack, the administrator wants to create a high availability...

At a minimum, which action must be taken to ensure traffic coming from outside an organization to the DMZ can access the DMZ zone for a company using private IP address space?

In which mode should an ION device be configured at a newly acquired site to allow site traffic to be audited without steering traffic?

Which functionality does an NGFW use to determine whether new session setups are legitimate or illegitimate?

A network engineer needs to configure a Prisma SD-WAN environment to optimize and secure traffic flow between branch offices and the data center. Which action should the engineer p...

Why would an enterprise architect use a Zero Trust Network Access (ZTNA) connector instead of a service connection for private application access?

A company uses Prisma Access to provide secure connectivity for mobile users to access its corporate-sanctioned Google Workspace and wants to block access to all unsanctioned Googl...

Which two cloud deployment high availability (HA) options would cause a firewall administrator to use Cloud NGFW? (Choose two.)

A company currently uses Prisma Access for its mobile users. A use case is discovered in which mobile users will need to access an internal site, but there is no existing network c...

How are content updates downloaded and installed for Cloud NGFWs?

Which Cloud-Delivered Security Services (CDSS) solution is required to configure and enable Advanced DNS Security?

What is the main security benefit of adding a CN-Series firewall to an existing VM-Series firewall deployment when the customer is using containers?

An IT security administrator is maintaining connectivity and security between on-premises infrastructure, private cloud, and public cloud environments in Strata Cloud Manager (SCM)...

Which statement best demonstrates a fundamental difference between Content-ID and traditional network security methods?

Which two SSH Proxy decryption profile configurations will reduce network attack surface? (Choose two.)

Which feature is available in both Panorama and Strata Cloud Manager (SCM)?

Which action in the Customer Support Portal is required to generate authorization codes for Software NGFWs?

Which two pieces of information are needed prior to deploying server certificates from a trusted third-party certificate authority (CA) to GlobalProtect components? (Choose two.)

In conjunction with Advanced URL Filtering, which feature can be enabled after usemame-to-IP mapping is set up?

Which two content updates can be pushed to next-generation firewalls from Panorama? (Choose two.)

Refer to the exhibit. A network administrator is using DNAT to map two servers to one public IP address. Traffic will be directed to a specific server based on the application, whe...

A company has an ongoing initiative to monitor and control IT-sanctioned SaaS applications. To be successful, it will require configuration of decryption policies, along with data...

Which subscription sends non-file format-based traffic that matches Data Filtering Profile criteria to a cloud service to render a verdict?

Which NGFW function can be used to enhance visibility, protect, block, and log the use of Post- quantum Cryptography (PQC)?

What are two ways to create an App-ID for unknown applications? (Choose two.)

Which two security profiles must be updated to prevent data exfiltration in outbound traffic on NGFWs? (Choose two.)

All branch sites in an organization have NGFWs running in production, and the organization wants to centralize its logs with Strata Logging Service. Which type of certificate is re...

What is a benefit of virtual systems for multitenancy?

Which action must a firewall administrator take to incorporate custom vulnerability signatures into current Security policies?

Which step is necessary to ensure an organization is using the inline cloud analysis features in its Advanced Threat Prevention subscription?

How many places will a firewall administrator need to create and configure a custom data loss prevention (DLP) profile across Prisma Access and the NGFW?

Infrastructure performance issues and resource constraints have prompted a firewall administrator to monitor hardware NGFW resource statistics. Which AlOps feature allows the admin...

Which zone is available for use in Prisma Access?

Which two configurations are required when creating deployment profiles to migrate a perpetual VM-Series firewall to a flexible VM? (Choose two.)

A network security engineer wants to forward Strata Logging Service data to tools used by the Security Operations Center (SOC) for further investigation. In which best practice ste...

What is the most efficient way in Strata Cloud Manager (SCM) to apply a Security policy to all ten firewalls in one data center?

Based on the image below, which source IP address will be seen in the data filtering logs of the Cloud NGFW for AWS with the default rulestack settings?

Which type of traffic can a firewall use for proper classification and visibility of internet of things (loT) devices?

A firewall administrator wants to segment the network traffic and prevent noncritical assets from being able to access critical assets on the network. Which action should the admin...

A security administrator is adding a new sanctioned cloud application to SaaS Data Security. After authentication, how does the tool gain API access for monitoring?

Which network design for internet of things (loT) Security allows traffic mirroring from the switch to a TAP interface on the firewall to monitor traffic not otherwise seen?

With Strata Cloud Manager (SCM), which action will efficiently manage Security policies across multiple cloud providers and on-premises data centers?

What is the primary role of Advanced DNS Security in protecting against DNS-based threats?

Which two logging types help troubleshoot remote user access issues? (Choose two)

In SSL Forward Proxy, what role does the firewall play in handling encrypted traffic?

What ensures that CDSS services have the latest threat intelligence?

Which of the following are considered best practices for network hardening on Palo Alto firewalls? (Choose two)

Which two features are available in Strata Cloud Manager (SCM)? (Choose two)

Which two profile types are available in NGFW security policies? (Choose two)

When a firewall acts as an application-level gateway (ALG), what does it require in order to establish a connection?