NetSec-Analyst Practice Test 5 — 10 Questions

Question 1

If an administrator creates an object in a local firewall that is also managed by SCM, what happens during the next push?

Accepted Answer

The object will be overwritten by the SCM configuration. SCM push operations typically overwrite local configuration changes to ensure that the centrally managed policy remains the source of truth.

Answer

The push will fail

Answer

The object is preserved

Answer

The object is merged

Question 2

You want to color-code objects in Strata Cloud Manager to improve visibility. Which feature do you use?

Accepted Answer

Tags. Tags are used to provide metadata, including colors, to objects for better organization and visual identification.

Answer

Device Groups

Answer

Descriptions

Answer

Object Filtering

Question 3

You are creating a new policy and realize you need a new Address Object. Can you create it from within the policy window?

Accepted Answer

Yes, by clicking the 'Add' button in the Source or Destination field. Yes, PAN-OS and SCM allow for the creation of new objects directly from the policy configuration menu without having to leave the screen.

Answer

Only if you have Superuser privileges

Answer

Only for Address Groups, not single objects

Answer

No, you must go to the Objects tab first

Question 4

You are configuring an Address Object in Strata Cloud Manager for a new web server. Which field must be unique within the configuration scope?

Accepted Answer

Object Name. The name field of an object must be unique within its context (Device Group or Snippet) to prevent configuration conflicts.

Answer

Tag

Answer

IP Netmask

Answer

Description

Question 5

You are migrating configurations to Strata Cloud Manager. What is the benefit of using Snippets?

Accepted Answer

They allow for reusable configuration templates across device groups. Snippets allow for the creation of reusable configuration templates that can be pushed to multiple device groups.

Answer

They are only for firewall hardware settings

Answer

They automatically detect viruses

Answer

They replace the need for security policies

Question 6

In a multi-vsys environment, how do you manage shared objects?

Accepted Answer

You must define the object in the 'Shared' scope. Objects can be defined as 'Shared' to make them available across all virtual systems on the firewall.

Answer

You must copy the object to each vsys

Answer

Objects cannot be shared across vsys

Answer

Use a tag to share them

Question 7

In a scenario where you use an Application Object in a Security Policy, how does the firewall identify the traffic?

Accepted Answer

By App-ID inspection. The firewall uses App-ID, which performs deep packet inspection to identify the application, regardless of the port being used.

Answer

By the DNS request

Answer

By the source IP

Answer

By the destination port

Question 8

Which components can be included in a 'Security Profile Group'? (Choose TWO)

Accepted Answer

Antivirus Profile. Security Profile Groups combine profile types like Antivirus and Vulnerability Protection.

Answer

Tag Object

Answer

Service Object

Answer

Address Object

Question 9

What information can you see in the object list view in SCM? (Choose THREE)

Accepted Answer

Object Type. The object list view typically shows the name, type, and associated tags for each object.

Answer

Real-time traffic volume

Answer

User password

Question 10

What is the primary function of a Security Profile Group in the context of object creation?

Accepted Answer

To group multiple security profiles for policy application. Security Profile Groups bundle multiple individual security profiles (e.g., Antivirus, Anti-Spyware, Vulnerability Protection) into a single object for easier policy assignment.

Answer

To create dynamic address filters

Answer

To group firewall interfaces

Answer

To define user access levels