最新的Network Security Administrator認證 NetSec-Pro考試題庫

問題1

Which two features are supported when using traffic steering rules for remote network deployment on Prisma Access? (Choose two.)

A. Dynamic Address Group

B. Bidirectional Forwarding Detection (BFD)

C. External dynamic list

D. Remote desktop protocol (RDP)

正確答案: A,C

說明：（僅 VCESoft 成員可見）

問題2

What occurs when a security profile group named "default" is created on an NGFW?

A. It is automatically applied to all new security rules.

B. It only applies to traffic that has been dropped due to the reset client action.

C. It allows traffic to bypass all security checks by default.

D. It negates all existing security profiles rules on new policy.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題3

How does PAN-OS identify App-IDs to perform application-layer inspection?

A. From inspection of SSL certificates, cloud-based metadata, and manual application classification by the administrator

B. From periodic updates that categorize web traffic based on domain names, focusing on web- browsing activities

C. From multiple classification mechanisms - application signatures, application protocol decoding, and heuristics

D. From predefined static rules based on IP addresses and ports configured by the administrator

正確答案: C

說明：（僅 VCESoft 成員可見）

問題4

How are policies evaluated in the AWS management console when creating a Security policy for a Cloud NGFW?

A. They must be created in the order they are intended to be evaluated.

B. The administrator sets a rule order to determine the order in which they are evaluated.

C. The administrator sets a rule priority to determine the order in which they are evaluated.

D. They can be dragged up or down the stack as they are evaluated.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題5

An organization's Security policy requires all SSL/TLS traffic using post-quantum cryptography (PQC) algorithms to be identified and logged.
Which next-generation firewall (NGFW) feature provides the settings for this purpose?

A. Decryption policy

B. Anti-spyware profile

C. SSL/TLS service profile

D. Decryption profile

正確答案: D

說明：（僅 VCESoft 成員可見）

問題6

In which order does an NGFW process URL categories for Security policy?

A. 1. Custom URL categories
2. Predefined categories
3. External dynamic lists

B. 1. External dynamic lists
2. Custom URL categories
3. Predefined categories

C. 1. Custom URL categories
2. External dynamic lists
3. Predefined categories

D. 1. Predefined categories
2. External dynamic lists
3. Custom URL categories

正確答案: B

說明：（僅 VCESoft 成員可見）

問題7

Which two logging types help troubleshoot remote user access issues? (Choose two)

A. Zone Protection Logs

B. GlobalProtect Logs

C. HIP Match Logs

D. Threat Logs

正確答案: B,C

說明：（僅 VCESoft 成員可見）

問題8

As part of a Zero Trust implementation, a security team has completed defining its micro- perimeters and writing all the initial context-based Security policy rules. Now, it is focused on collecting and analyzing logs to ensure the policies are working as intended.
Which step of the Palo Alto Networks five-step methodology is the team now performing?

A. Map Your Transaction Flows

B. Monitor and Maintain Your Network

C. Define Your Attack Surface

D. Architect a Zero Trust Network

正確答案: B

說明：（僅 VCESoft 成員可見）

問題9

In a distributed enterprise implementing Prisma SD-WAN, which configuration element should be implemented first to ensure optimal traffic flow between remote sites and headquarters?

A. Configure static routes between all the branch offices.

B. Deploy redundant ION devices at each location.

C. Enable split tunneling for all branch locations.

D. Implement dynamic path selection using real-time performance metrics.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題10

A network security engineer wants to forward Strata Logging Service data to tools used by the Security Operations Center (SOC) for further investigation. In which best practice step of Palo Alto Networks Zero Trust does this fit?

A. Implementation

B. Report and Maintenance

C. Standards and Designs

D. Map and Verify Transactions

正確答案: B

說明：（僅 VCESoft 成員可見）

最新的Palo Alto Networks Network Security Professional - NetSec-Pro免費考試真題

最新更新

站內鏈接

聯系我們