NetSec-Pro Paloalto-Networks Exam Questions and Free Practice Test

Question 7

Which set of attributes is used by IoT Security to identify and classify appliances on a network when determining Device-ID?

A. IP address, network traffic patterns, and device type

B. MAC address, device manufacturer, and operating system

C. Hostname, application usage, and encryption method

D. Device model, firmware version, and user credential

Correct Answer:B

Question 8

A network security engineer has created a Security policy in Prisma Access that includes a negated region in the source address. Which configuration will ensure there is no connectivity loss due to the negated region?

A. Set the service to be application-default.

B. Create a Security policy for the negated region with destination address ??any??.

C. Add a Dynamic Application Group to the Security policy.

D. Add all regions that contain private IP addresses to the source address.

Correct Answer:B

Question 9

Which offering can be managed in both Panorama and Strata Cloud Manager (SCM)?

A. Autonomous Digital Experience Manager (ADEM)

B. VM-Series Next-Generation Firewall (NGFW)

C. Prisma SD-WAN

D. SaaS Security

Correct Answer:B

Question 10

Which component of NGFW is supported in active/passive design but not in
active/active design?

A. Single floating IP address

B. Using a DHCP client

C. Route-based redundancy

D. Configuring ARP load-sharing on Layer 3

Correct Answer:A

Question 11

A network security engineer needs to implement segmentation but is under strict compliance requirements to place security enforcement as close as possible to the private applications hosted in Azure. Which deployment style is valid and meets the requirements in this scenario?

A. On a VM-Series NGFW, configure several Layer 2 zones with Layer 2 interfaces assigned to logically segment the network.

B. On a PA-Series NGFW, configure several Layer 2 zones with Layer 2 interfaces assigned to logically segment the network.

C. On a VM-Series NGFW, configure several Layer 3 zones with Layer 3 interfaces assigned to logically segment the network.

D. On a PA-Series NGFW, configure several Layer 3 zones with Layer 3 interfaces assigned to logically segment the network.

Correct Answer:C

Question 12

Which step is necessary to ensure an organization is using the inline cloud analysis features in its Advanced Threat Prevention subscription?

A. Disable anti-spyware to avoid performance impacts and rely solely on external threat intelligence.

B. Enable SSL decryption in Security policies to inspect and analyze encrypted traffic for threats.

C. Update or create a new anti-spyware security profile and enable the appropriate local deep learning models.

D. Configure Advanced Threat Prevention profiles with default settings and only focus on high-risk traffic to avoid affecting network performance.

Correct Answer:C

START NetSec-Pro EXAM