NetSec-Pro practice questions 41–50

1. Question 41 · 62 in bank

   Select 2

   When physical ION devices are allocated, in which two states are they displayed on the Prisma SD-WAN web interface under "Devices"? (Choose two.)

   • AOffline
   • BStandby
   • CUnclaimed
   • DNeeds attention

   Show answer

   Answer: AC

   Next question

2. Question 42 · 62 in bank

   Which step is necessary to ensure an organization is using the inline cloud analysis features in its Advanced Threat Prevention subscription?

   • AUpdate or create a new Anti-spyware security profile and enable the appropriate local deep learning models.
   • BEnable SSL decryption in Security policies to inspect and analyze encrypted traffic for threats.
   • CDisable anti-spyware to avoid performance impacts and rely solely on external threat intelligence.
   • DConfigure Advanced Threat Prevention profiles with default settings and only focus on high-risk traffic to avoid affecting network performance.

   Show answer

   Answer: A

   Next question

3. Question 43 · 62 in bank

   How do Cloud NGFW instances get created when using AWS centralized deployments?

   • AA security VPC will be created as transit gateways to push all traffic through the area.
   • BThey are placed in a vWAN with a virtual hub.
   • CSelected VPCs will have Cloud NGFW workloads added to them.
   • DThey replace the internet gateway service.

   Show answer

   Answer: A

   Next question

4. Question 44 · 62 in bank

   Why would a packet be processed through the slow path on an NGFW?

   • AIt does not require application identification or user identification.
   • BIt is part of an already established session.
   • CIt is part of a new or unestablished session.
   • DIt only needs basic NAT and Security policy enforcement.

   Show answer

   Answer: C

   Next question

5. Question 45 · 62 in bank

   How many places will a firewall administrator need to create and configure a custom data loss prevention (DLP) profile across Prisma Access and the NGFW?

   • AOne
   • BTwo
   • CThree
   • DFour

   Show answer

   Answer: A

   Next question

6. Question 46 · 62 in bank

   Which security profile provides real-time protection against threat actors who exploit the misconfigurations of DNS infrastructure and redirect traffic to malicious domains?

   • AIntelligent Run-time Memory Analysis
   • BMachine learning (ML)
   • CDynamic analysis
   • DStatic analysis

   Show answer

   Answer: B

   Next question

7. Question 47 · 62 in bank

   Within which security profile is the DNS sinkholing action enabled?

   • AFile Blocking
   • BAntivirus
   • CAnti-spyware
   • DDoS Protection

   Show answer

   Answer: C

   Next question

8. Question 48 · 62 in bank

   When a firewall acts as an application-level gateway (ALG), what does it require in order to establish a connection?

   • ADynamic IP and Port (DIPP)
   • BSession Initiation Protocol (SIP)
   • CPayload
   • DPinholes

   Show answer

   Answer: D

   Next question

9. Question 49 · 62 in bank

   Select 2

   A firewall administrator wants to enable host information profiles (HIPs) to collect information from corporate hosts by using GlobalProtect. Which two details will the administrator be able to collect from the host? (Choose two.)

   • AWAN statistics
   • BAntivirus definitions
   • CHost memory consumption
   • DDisk encryption

   Show answer

   Answer: BD

   Next question

10. Question 50 · 62 in bank

    Select 2

    Which two configurations are required when creating deployment profiles to migrate a perpetual VM-Series firewall to a flexible VM? (Choose two.)

    • AAllow only the same security services as the perpetual VM.
    • BDeploy virtual Panorama for management.
    • CChoose "Fixed vCPU Models" for configuration type.
    • DAllocate the same number of vCPUs as the perpetual VM.

    Show answer

    Answer: AD

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

NetSec-Pro practice, question 41. 62 questions available.