最新的Network Security Administrator認證 NetSec-Analyst考試題庫

問題1

To comply with new regulations, a company requires all traffic logs related to the "HR-App" application across all Security policies be sent to a compliance syslog server. A Log Forwarding profile already exists to send logs to a default syslog server.
What is the most efficient process for configuring an NGFW to comply with the new regulations without disrupting existing traffic logs being sent to the default syslog server?

A. Edit the existing Log Forwarding profile, add a new entry, use the filter builder to match on application
"HR-App," and add the details for the compliance syslog server.

B. Edit the existing Log Forwarding profile by adding a new match list consisting of Log Forwarding filter for the application named "HR-App" to direct logs to the compliance syslog server.

C. Create a new Log Forwarding profile, update the profile with the details of the compliance syslog server and attach the profile to the relevant Security policy rule.

D. Create a Log Forwarding profile and enable the predefined filter for "Application" In the associated dropdown, select or create a new application object with the name "HR-App," and add the details for the compliance syslog server.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題2

Beyond being a SaaS-based delivery platform, what is an advantage of Strata Cloud Manager (SCM) over Panorama? (Choose one answer)

A. Real-time alerting

B. NGFW and Prisma Access management

C. Customizable dashboards

D. Live, inline best practice checks

正確答案: D

說明：（僅 VCESoft 成員可見）

問題3

A financial institution must comply with a regulation that prohibits the decryption of any traffic destined for
"Banking" or "Healthcare" websites. How should the analyst implement this requirement while still decrypting other web traffic?

A. Set the default Decryption Profile to "No-Decrypt."

B. Create a Decryption Policy with the action "No Decrypt" and select the relevant URL categories.

C. Use a NAT policy to bypass the SSL engine for those categories.

D. Add the banking URLs to the "External Dynamic List."

正確答案: B

說明：（僅 VCESoft 成員可見）

問題4

In Strata Cloud Manager (SCM), which logical container is used to group firewalls that share the same configuration requirements, such as those at a specific regional office?

A. Snippets

B. Folders

C. Device Groups

D. Template Stacks

正確答案: B

說明：（僅 VCESoft 成員可見）

問題5

What are two valid pattern types in a Data Filtering profile? (Choose two.)

A. Custom Dictionary

B. Regular Expression

C. File Properties

D. Proximity Pattern

正確答案: B,C

說明：（僅 VCESoft 成員可見）

問題6

What is the purpose of the "Config Audit" feature in Panorama?

A. To check if a firewall is running the latest software version.

B. To monitor the real-time CPU usage of the firewalls.

C. To compare the current running configuration with a previously saved version.

D. To automatically resolve IP address conflicts.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題7

Which Strata Cloud Manager (SCM) feature provides a consolidated view of all high-priority security incidents across a global network, including those from firewalls and Prisma Access?

A. Policy Optimizer

B. Device Health Dashboard

C. Command Center

D. Activity Insights

正確答案: C

說明：（僅 VCESoft 成員可見）

問題8

Which log type should be checked first using Log Viewer when a user reports being unable to access a specific website?

A. Firewall/DNS Security

B. Firewall/Traffic

C. Firewall/Threat

D. Firewall/URL

正確答案: B

說明：（僅 VCESoft 成員可見）

最新的Palo Alto Networks Network Security Analyst - NetSec-Analyst免費考試真題

最新更新

站內鏈接

聯系我們