NetSec-Pro Paloalto-Networks Exam Questions and Free Practice Test

Question 13

Which two SSH Proxy decryption profile settings should be configured to enhance the company??s security posture? (Choose two.)

A. Block sessions when certificate validation fails.

B. Allow sessions with legacy SSH protocol versions.

C. Block connections that use non-compliant SSH versions.

D. Allow sessions when decryption resources are unavailable.

Correct Answer:AC

Question 14

In a distributed enterprise implementing Prisma SD-WAN, which configuration element should be implemented first to ensure optimal traffic flow between remote sites and headquarters?

A. Deploy redundant ION devices at each location.

B. Implement dynamic path selection using real-time performance metrics.

C. Configure static routes between all the branch offices.

D. Enable split tunneling for all branch locations.

Correct Answer:B

Question 15

A network administrator obtains Palo Alto Networks Advanced Threat Prevention and Advanced DNS Security subscriptions for edge NGFWs and is setting up security profiles. Which step should be included in the initial configuration of the Advanced DNS Security service?

A. Create a decryption policy rule to decrypt DNS-over-TLS / port 853 traffic.

B. Create overrides for all company owned FQDNs.

C. Configure DNS Security signature policy settings to sinkhole malicious DNS queries.

D. Enable Advanced Threat Prevention with default settings and only focus on high-risk traffic.

Correct Answer:C

START NetSec-Pro EXAM