NetSec-Pro practice questions 31–40

1. Question 31 · 62 in bank

   Which file type does Advanced WildFire support for inline analysis to detect advanced malware?

   • APE
   • BAPK
   • CPDF
   • DJAR

   Show answer

   Answer: A

   Next question

2. Question 32 · 62 in bank

   An administrator wants to implement additional Cloud-Delivered Security Services (CDSS) on a data center NGFW that already has one enabled. What benefit does the NGFWs single-pass parallel processing (SP3) architecture provide?

   • AIt allows for traffic inspection at the application level.
   • BThere will be only a minor reduction in performance.
   • CThere will be no additional performance degradation.
   • DIt allows additional security inspection devices to be added inline.

   Show answer

   Answer: C

   Next question

3. Question 33 · 62 in bank

   By default, how often are signatures updated for firewalls with Advanced WildFire?

   • AIn real time
   • BWithin 5-10 minutes
   • CWithin 24-48 hours
   • DOnce a week

   Show answer

   Answer: A

   Next question

4. Question 34 · 62 in bank

   What is the recommended upgrade path from PAN-OS 9.1 to PAN-OS 11.2?

   • A9.1 --> 11.2
   • B9.1 --> 11.0 --> 11.2
   • C9.1 --> 10.0 --> 11.0 --> 11.2
   • D9.1 --> 10.0 --> 11.0 --> 11.1 --> 11.2

   Show answer

   Answer: C

   Next question

5. Question 35 · 62 in bank

   Which functionality does an NGFW use to determine whether new session setups are legitimate or illegitimate?

   • ASYN bit
   • BSYN flood protection
   • CSYN cookies
   • DRandom Early Detection (RED)

   Show answer

   Answer: C

   Next question

6. Question 36 · 62 in bank

   How does a firewall behave when SSL Inbound Inspection is enabled?

   • AIt decrypts inbound and outbound SSH connections.
   • BIt acts as meddler-in-the-middle between the client and the internal server.
   • CIt acts transparently between the client and the internal server.
   • DIt decrypts traffic between the client and the external server.

   Show answer

   Answer: B

   Next question

7. Question 37 · 62 in bank

   Select 2

   What are two indications that a packet has been processed into a fast path session? (Choose two.)

   • AContent and application inspection is recognized.
   • BInitial forwarding look is using a FIB.
   • CPrevious packets of the same session have been identified.
   • DSecurity policy lookup is initiated.

   Show answer

   Answer: AC

   Next question

8. Question 38 · 62 in bank

   Select 2

   Which two content updates can be pushed to NGFWs from Panorama? (Choose two.)

   • AWildFire
   • BApplications and threats
   • CAdvanced URL Filtering
   • DGlobalProtect data file

   Show answer

   Answer: AB

   Next question

9. Question 39 · 62 in bank

   Select 2

   Which two features are supported when using traffic steering rules for remote network deployment on Prisma Access? (Choose two.)

   • ABidirectional Forwarding Detection (BFD)
   • BExternal dynamic list
   • CRemote desktop protocol (RDP)
   • DDynamic Address Group

   Show answer

   Answer: BD

   Next question

10. Question 40 · 62 in bank

    How does Strata Logging Service help resolve ever-increasing log retention needs for a company using Prisma Access?

    • ALog traffic using the licensed bandwidth purchased for Prisma Access reduces overhead.
    • BAutomatic selection of physical data storage regions decreases adoption time.
    • CIt scales to meet the capacity needs of new locations as business grows.
    • DIt increases resilience due to decentralized collection and storage of logs.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

NetSec-Pro practice, question 31. 62 questions available.