NetSec-Pro practice questions 21–30

1. Question 21 · 62 in bank

   Select 2

   After a firewall is associated with Strata Cloud Manager (SCM), which two additional actions are required to enable management of the firewall from SCM? (Choose two.)

   • AInstall a device certificate.
   • BConfigure a Security policy allowing "stratacloudmanager.paloaltonetworks.com" for all users.
   • CConfigure NTP and DNS servers for the firewall.
   • DDeploy a service connection for each branch site and connect with SCM.

   Show answer

   Answer: AC

   Next question

2. Question 22 · 62 in bank

   Select 2

   Which two frameworks are compared in the Compliance Summary dashboard of Strata Cloud Manager (SCM)? (Choose two.)

   • AGDPR
   • BNIST
   • CPCI-DSS
   • DCIS

   Show answer

   Answer: BD

   Next question

3. Question 23 · 62 in bank

   In which order is Prisma SD-WAN dynamic path selection performed?

   • A1. Determine potential paths based on policy. 2. Determine link quality. 3. Measure application performance. 4. Measure link capacity.
   • B1. Measure link capacity. 2. Measure application performance. 3. Determine link quality. 4. Determine potential paths based on policy.
   • C1. Determine potential paths based on policy. 2. Measure application performance. 3. Determine link quality. 4. Measure link capacity.
   • D1. Determine link quality. 2. Measure link capacity. 3. Measure application performance. 4. Determine potential paths based on policy.

   Show answer

   Answer: A

   Next question

4. Question 24 · 62 in bank

   Which NGFW tool should be reviewed when a management team wants feedback on how to reduce the attack surface of their network security deployment and how it maps to the Center for Internet Security (CIS) Critical Security Controls?

   • AExecutive summary report
   • BPolicy Optimizer
   • CBest Practice Assessment (BPA)
   • DCommand Center

   Show answer

   Answer: C

   Next question

5. Question 25 · 62 in bank

   Select 2

   A network engineer pushes specific Panorama reports of new AI URL category types to branch NGFWs. Which two report types achieve this goal? (Choose two.)

   • AAI
   • BPDF summary
   • CCustom
   • DSNMP

   Show answer

   Answer: BC

   Next question

6. Question 26 · 62 in bank

   Select 2

   Which two types of logs must be forwarded to Strata Logging Service for IoT Security to function? (Choose two.)

   • AWildFire
   • BEnhanced application
   • CThreat
   • DTraffic

   Show answer

   Answer: BD

   Next question

7. Question 27 · 62 in bank

   Select 2

   Which two modes should be enabled on the GlobalProtect agent to allow a subset of users to connect directly to SaaS and internal applications while allowing the remaining users to connect through third-party VPN? (Choose two.)

   • ARemote desktop protocol (RDP)
   • BProxy
   • CTunnel
   • DClientless

   Show answer

   Answer: BC

   Next question

8. Question 28 · 62 in bank

   In which security profile is credential phishing prevention implemented?

   • AURL Filtering
   • BVulnerability Protection
   • CAntivirus
   • DAnti-spyware

   Show answer

   Answer: A

   Next question

9. Question 29 · 62 in bank

   How does PAN-OS identify App-IDs to perform application-layer inspection?

   • AFrom predefined static rules based on IP addresses and ports configured by the administrator
   • BFrom inspection of SSL certificates, cloud-based metadata, and manual application classification by the administrator
   • CFrom periodic updates that categorize web traffic based on domain names, focusing on web-browsing activities
   • DFrom multiple classification mechanisms - application signatures, application protocol decoding, and heuristics

   Show answer

   Answer: D

   Next question

10. Question 30 · 62 in bank

    Select 2

    Which two features can a network administrator use to troubleshoot the issue of a Prisma Access mobile user who is unable to access SaaS applications? (Choose two.)

    • AAutonomous Digital Experience Manager (ADEM) console
    • BCapacity Analyzer
    • CGlobal Protect logs
    • DSaaS Application Risk Portal

    Show answer

    Answer: AC

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

NetSec-Pro practice, question 21. 62 questions available.