NetSec-Pro Exam Training Practice Tests (Palo Alto Networks Network Security Professional)]

Question 1

Which two logging types help troubleshoot remote user access issues? (Choose two)

A. Zone Protection Logs B. HIP Match Logs C. GlobalProtect Logs D. Threat Logs

Correct Answer: B,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Which of the following are considered best practices for network hardening on Palo Alto firewalls?
(Choose two)

A. Use User-ID and Device-ID-based policies B. Enable unused administrative interfaces C. Segment networks using zones D. Disable logging

Correct Answer: A,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

How does Strata Logging Service help resolve ever-increasing log retention needs for a company using Prisma Access?

A. It scales to meet the capacity needs of new locations as business grows. B. It increases resilience due to decentralized collection and storage of logs. C. Log traffic using the licensed bandwidth purchased for Prisma Access reduces overhead. D. Automatic selection of physical data storage regions decreases adoption time.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

In SSL Forward Proxy, what role does the firewall play in handling encrypted traffic?

A. It uses SSH tunneling to analyze SSL B. It allows encrypted traffic to pass without inspection C. It acts as a Certificate Authority and decrypts client-side SSL traffic D. It forces the client to bypass decryption

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

When physical ION devices are allocated, in which two states are they displayed on the Prisma SD-WAN web interface under "Devices"? (Choose two.)

A. Standby B. Unclaimed C. Offline D. Needs attention

Correct Answer: B,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

In which two applications can Prisma Access threat logs for mobile user traffic be reviewed?
(Choose two.)

A. Strata Logging Service B. Service connection firewall C. Prisma Cloud dashboard D. Strata Cloud Manager (SCM)

Correct Answer: A,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

A Prisma Access administrator wants to attach the same set of Security policies to each new rule created. How can the administrator automate the profiles to be attached to new rules?

A. Create profiles for each CDSS and name them "default." B. Create a security profile group and name it "default." C. Use Policy Analyzer after creating the new rules. D. Use AIOps to automate the security profile group attachment.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

What are the primary classification mechanisms used by PAN-OS App-ID to identify applications?

A. URL filtering database
DNS lookups
SSL certificate properties B. IP address
Port number
Protocol C. Application signatures
Application protocol decoding
Heuristics D. Predefined static rules
DNS lookups
Port number

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

Which activity only appears under the Content-ID portion of single-pass parallel processing (SP3)?

A. SaaS Security B. Application heuristics C. Application decoding D. Malware analysis

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

Which two types of logs must be forwarded to Strata Logging Service for IoT Security to function?
(Choose two.)

A. Traffic B. Enhanced application C. WildFire D. Threat

Correct Answer: B,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Palo Alto Networks Network Security Professional - NetSec-Pro Exam Practice Test