NetSec-Analyst practice questions 1–10

1. Question 1 · 21 in bank

   A security administrator is creating an internet of things (IoT) Security policy and needs to select behaviors for the trafficю Which characteristic has the greatest impact to the risk level of applications?

   

   • AUsed by Malware
   • BPervasive
   • CTunnels Other Apps
   • DKnown Vulnerabilities

   Show answer

   Answer: A

   Next question

2. Question 2 · 21 in bank

   A security administrator wants to determine which action a URL Filtering profile will take on the URL "www.chatgpt.com." The firewall has a custom URL object with "www.chatgpt.com/" as a member called "Permitted-AI." The URL "www.chatgpt.com" is also categorized as "Artificial-Intelligence, " "Computer-and-Internet-Info," and "Low-Risk." The URL Filtering profile has the following in descending order: • Artificial-Intelligence set to continue • Computer-and-Internet-Info set to block • Low-Risk set to alert • Permitted-AI set to allow Which action will the URL Filtering profile take when traffic matches the "www.chatgpt.com" URL on a rule with this profile attached?

   • AContinue
   • BAlert
   • CAllow
   • DBlock

   Show answer

   Answer: C

   Next question

3. Question 3 · 21 in bank

   A security administrator is building out Decryption policies and wants to decrypt according to Palo Alto Networks best practices. Which URL categories should the administrator add to the policies?

   • AProxy avoidance and anonymizers, ransomware unknown, web-based email, web advertisements, and not resolved.
   • BOnline storage and backup web-based email web hosting, personal sites and blogs, content delivery networks, and high-risk URL.
   • CAI website generator, Command and Control, compromised website, encrypted DNS, and dynamic DNS.
   • DNewly registered domains, internet communications and telephony, high-risk URL, insufficient content, hacking, and grayware.

   Show answer

   Answer: B

   Next question

4. Question 4 · 21 in bank

   Which set of actions will allow an administrator to handle traffic redirection most efficiently when degradation occurs on a specific SaaS application that has an on-premises backup?

   • AUse Advanced Routing Engine to create a logical router with BGP, then set up a new AS routing environment. Peer the AS to the SaaS company's AS and redistribute routes from the SaaS company's AS with BGP Filtering profile for the application-specific traffic.
   • BUse VPN tunneling to create tunnels between the branches and the SaaS application provider with a backup tunnel pointing to the on-premises backup. Use OSPF to determine the shortest path to reach the application which will reconverge when there is a failure.
   • CUse Policy-Based Forwarding (PBF) to create a rule that sends sessions for the SaaS application to the on-premises backup, then create a path monitor with "wait-recover" selected. Ensure that "enforce symmetric return" is enabled for the rule so failures do not create routing loops.
   • DUse Advanced SD-WAN to create SaaS Quality profiles and Path Quality profiles with appropriate SLA levels, then create a Traffic Distribution profile set for "top down" with a DIA interface first and the SD-WAN path that leads to on-premises backup second. Use these in an SD-WAN rule.

   Show answer

   Answer: D

   Next question

5. Question 5 · 21 in bank

   What is the expected behavior of an NGFW for handling traffic that does not match any of the SD-WAN rules in the policy?

   • AIt will send the traffic out the first interface listed in the SD-WAN interface profile.
   • BIt will send the traffic using an implied SD-WAN round-robin rule.
   • CIt will not use SD-WAN but will fall back to the standard routing table to determine how to handle the traffic.
   • DIt will drop the traffic using an implied SD-WAN default deny rule.

   Show answer

   Answer: B

   Next question

6. Question 6 · 21 in bank

   A team of analysts uses four NGWFs with the Precision Al Bundle, SaaS Security Inline, and Strata Cloud Manager Pro Collectively this secures all company assets across the data center and two remote sites. A security incident requires the team to review a mobile user, John Doe. During the audit, the team prompts, "How was the application experience for John Doe over the past 60 days?” What is an expected response from Strata Copilot?

   • A"The average application test score for 'john doe’ over the past 60 days is 37 67."
   • BThe user ’John Doe' encountered a total of 219 threats in the last 3 hours."
   • CThe top three threats impacting John Doe are phishing, SQL injections, and ransomware."
   • D"Your organization doesn’t have ADEM."

   Show answer

   Answer: A

   Next question

7. Question 7 · 21 in bank

   A company requires that all file transfers only over HTTP (tcp/80 and tcp/8080) to SaaS storage must be inspected for data exfiltration. Traffic to encrypted HTTPS SaaS storage cannot be inspected based on the company decryption restrictions. When using a security profile group, which Security policy configuration meets this requirement?

   • AOne with data filtering to inspect all HTTP traffic on the web-browsing application using application-default for the service.
   • BOne with URL filtering and file blocking to block all file uploads to the URL category online-storage-and-backup, then set the service to tcp/80 and tcp/8080.
   • COne with data filtering and the service set to tcp/80 and tcp/8080, then verify block threshold is set to "1" to stop exfiltration.
   • DOne with data filtering and an application filter that matches "file-sharing" applications, then set the service to tcp/80 and tcp/8080.

   Show answer

   Answer: A

   Next question

8. Question 8 · 21 in bank

   A financial company is deploying NGFWs with the Advanced SD-WAN subscription to improve uptime and bandwidth across thousands of ATMs. The company requires that traffic flows to the internal application needed by the ATMs always use the path with the lowest latency and packet loss. Which unique SD-WAN rule parameters meet this criteria?

   • AApplication/Service: "Internal Application for ATMs" → Path Selection: "Best Available Path" in Traffic Distribution Profile.
   • BApplication/Service: "Internal Application for ATMs" & "Management" in Path Quality Profile → Path Selection "Any."
   • CApplication/Service: "Internal Application for ATMs" → Path Selection "Weighted Distribution" in Traffic Distribution Profile.
   • DApplication/Service: "Internal Application for ATMs" & "ATM Path(Custom)" in Path Quality Profile → Path Selection "Any."

   Show answer

   Answer: A

   Next question

9. Question 9 · 21 in bank

   A network security analyst is having difficulty configuring a data protection setup to find references to company secret information. The phrases and words that indicate secret information are not unique and can show up in publicly available assets. Which steps will result in a successful configuration?

   • ACreate a custom data pattern with basic regular expression, then use expression quantifiers to validate that the secret information is being matched an appropriate number of times.
   • BCreate a custom data pattern with weighted regular expression, weight the key phrases positively, and weight information that would disqualify negatively.
   • CCreate a custom data pattern with regular expression for the key phrases and proximity keywords containing what is typically around those phrases when it is secret.
   • DCreate two data dictionaries, one with all the key phrases and the other with phrases that would disqualify the secrecy. Use the first dictionary in a primary rule and the second in the secondary rule.

   Show answer

   Answer: B

   Next question

10. Question 10 · 21 in bank

    To comply with new regulations, a company requires all traffic logs related to the "HR-App" application across all Security policies be sent to a compliance syslog server. A Log Forwarding profile already exists to send logs to a default syslog server. What is the most efficient process for configuring an NGFW to comply with the new regulations without disrupting existing traffic logs being sent to the default syslog server?

    • AEdit the existing Log Forwarding profile by adding a new match list consisting of Log Forwarding filter for the application named "HR-App" to direct logs to the compliance syslog server.
    • BCreate a new Log Forwarding profile, update the profile with the details of the compliance syslog server and attach the profile to the relevant Security policy rule.
    • CEdit the existing Log Forwarding profile, add a new entry, use the filter builder to match on application "HR-App, " and add the details for the compliance syslog server.
    • DCreate a Log Forwarding profile and enable the predefined filter for "Application" In the associated dropdown, select or create a new application object with the name "HR-App," and add the details for the compliance syslog server.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

NetSec-Analyst practice, question 1. 21 questions available.