NetSec-Analyst Exam Questions in PDF and Online

QUESTION: 1

DRAG DROP (Drag and Drop is not supported)

Match the Palo Alto Networks Security Operating Platform architecture to its description.

See Explanation for the Answer.

Answer(s): A

Explanation:

Threat Intelligence Cloud Gathers, analyzes, correlates, and disseminates threats to and from the network and endpoints located within the network.

Next-Generation Firewall Identifies and inspects all traffic to block known threats

Advanced Endpoint Protection - Inspects processes and files to prevent known and unknown exploits

Reveal Solution Next Question

QUESTION: 2

Which firewall plane provides configuration, logging, and reporting functions on a separate processor?

control
network processing
data
security processing

Answer(s): A

Reveal Solution Next Question

QUESTION: 3

A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base.

On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.

Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application
No impact because the apps were automatically downloaded and installed
No impact because the firewall automatically adds the rules to the App-ID interface
All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until the security administrator approves the applications

Answer(s): A

Explanation:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/manage-new-app-ids- introduced-in-content-releases/review-new-app-id-impact-on-existing-policy-rules

Reveal Solution Next Question

QUESTION: 4

How many zones can an interface be assigned with a Palo Alto Networks firewall?

two
three
four
one

Answer(s): D

Reveal Solution Next Question

QUESTION: 5

Which two configuration settings shown are not the default? (Choose two.)

Enable Security Log
Server Log Monitor Frequency (sec)
Enable Session
Enable Probing

Answer(s): B,C

Reveal Solution Next Question

QUESTION: 6

Which data-plane processor layer of the graphic shown provides uniform matching for spyware and vulnerability exploits on a Palo Alto Networks Firewall?