NETSEC-PRO Exam Questions
70 real NETSEC-PRO exam questions with expert-verified answers and explanations. Page 2 of 2.
- Question #51Secure Remote Access
What additional feature is included in Premium GlobalProtect subscriptions?
GlobalProtectHIP checksAlways-On VPNsubscription features - Question #52Prisma Access Operations
What feature ensures smooth upgrades in Prisma Access without interrupting service?
Prisma Accesszero-downtime upgradeservice continuityupgrade management - Question #53Network Security Management
Which products can be managed by both SCM and Panorama? (Choose two)
SCMPanoramaCN-SeriesVM-Series - Question #54Logging and Monitoring
How does Strata Logging Service help resolve ever-increasing log retention needs for a company using Prisma Access?
Strata Logging Servicelog retentionscalabilityPrisma Access - Question #55Network Security Management
After a firewall is associated with Strata Cloud Manager (SCM), which two additional actions are required to enable management of the firewall from SCM? (Choose two.)
SCMfirewall onboardingdevice certificateNTP/DNS configuration - Question #56Threat Prevention
How does Advanced WildFire integrate into third-party applications?
WildFireAPI integrationthird-party applicationsthreat intelligence - Question #57Decryption and SSL/TLS Inspection
Which two SSH Proxy decryption profile settings should be configured to enhance the company's security posture? (Choose two.)
SSH Proxydecryption profilecertificate validationSSH security - Question #58Prisma Access Policy Configuration
A network security engineer has created a Security policy in Prisma Access that includes a negated region in the source address. Which configuration will ensure there is no connect...
Prisma Accesssecurity policynegated regionconnectivity troubleshooting - Question #59Logging and Monitoring
What is a necessary step for creation of a custom Prisma Access report on Strata Cloud Manager (SCM)?
SCMcustom reportsPrisma Accessdashboard configuration - Question #60Decryption and SSL/TLS Inspection
Which NGFW function can be used to enhance visibility, protect, block, and log the use of Post- quantum Cryptography (PQC)?
post-quantum cryptographydecryption policyPQC visibilityNGFW - Question #61Data Loss Prevention
During a security incident investigation, which Security profile will have logs of attempted confidential data exfiltration?
DLPdata exfiltrationEnterprise DLPsecurity incident response - Question #62IoT Security
Which set of attributes is used by IoT Security to identify and classify appliances on a network when determining Device-ID?
IoT SecurityDevice-IDdevice classificationnetwork identification - Question #63IoT Security
Which two types of logs must be forwarded to Strata Logging Service for IoT Security to function? (Choose two.)
IoT SecurityStrata Logging Servicelog forwardingenhanced application logs - Question #64Next-Generation Firewall Operations
Which action is only taken during slow path in the NGFW policy?
NGFW packet processingslow pathSSL/TLS decryptionsession processing - Question #65SaaS Security
Which feature of SaaS Security will allow a firewall administrator to identify unknown SaaS applications in an environment?
SaaS SecurityApp-ID Cloud EngineSaaS discoveryunknown applications - Question #66Cloud Security Deployments
How do Cloud NGFW instances get created when using AWS centralized deployments?
Cloud NGFWAWS centralized deploymentVPC securitycloud architecture - Question #67GlobalProtect and Remote Access
Which GlobalProtect configuration is recommended for granular security enforcement of remote user device posture?
GlobalProtectHIP checksdevice postureremote access security - Question #68Security Management and Operations
Which AI-powered solution provides unified management and operations for NGFWs and Prisma Access?
Strata Cloud ManagerNGFW managementPrisma AccessAI-powered management - Question #69Security Management and Operations
Which action allows an engineer to collectively update VM-Series firewalls with Strata Cloud Manager (SCM)?
Strata Cloud ManagerVM-Seriesdevice groupingsoftware updates - Question #70Cloud Security Deployments
A network security engineer needs to implement segmentation but is under strict compliance requirements to place security enforcement as close as possible to the private applicatio...
VM-SeriesAzure deploymentnetwork segmentationcompliance enforcement