NetSec-Analyst Practice Test 8 — 10 Questions

Question 1

What is the function of the 'Commit' operation regarding objects?

Accepted Answer

It pushes the configuration changes to the data plane. Objects created in the configuration are only active and enforced on the firewall after a 'Commit' is performed.

Answer

It deletes the object

Answer

It saves the object to the disk

Answer

It creates the object

Question 2

Which TWO methods can be used to identify traffic using App-ID when port-based rules are insufficient?

Accepted Answer

Behavioral analysis of the traffic flow.. App-ID relies on packet inspection and signature matching.

Answer

IP address reputation filtering.

Answer

MAC address filtering.

Answer

URL filtering categories.

Question 3

Which THREE conditions must be met for a NAT policy to be successfully applied to an incoming packet?

Accepted Answer

Source Zone match. NAT policy matches require a match on the source zone, destination zone, and destination address (or service) to correctly translate the packet.

Answer

QoS marking must be set

Answer

User-ID must be enabled

Question 4

Which THREE criteria are used to determine which security policy rule a packet matches?

Accepted Answer

Source Zone. The firewall matches packets based on source zone, destination zone, and source/destination addresses in a specific order defined in the policy base.

Answer

QoS class

Answer

NAT rule

Question 5

When configuring a QoS policy, what is the first step the administrator must take to ensure the traffic is correctly prioritized?

Accepted Answer

Enable QoS on the egress interface. Before QoS can be applied, the traffic must be identified and classified by the QoS policy based on the ingress interface and traffic matching criteria.

Answer

Create a new zone

Answer

Configure NAT policy

Answer

Delete all App-IDs

Question 6

When managing objects in SCM, which actions can be performed on tags? (Choose TWO)

Accepted Answer

Assigning a color. Tags can be assigned colors and applied to various objects for organization.

Answer

Defining an IP range

Answer

Defining a port protocol

Answer

Creating a security policy

Question 7

Which tab in the Palo Alto Networks GUI is primarily used to manage Security and NAT policies?

Accepted Answer

Policies. The 'Policies' tab is the central location for managing all types of policies.

Answer

Objects

Answer

Monitor

Answer

Network

Question 8

An administrator wants to group multiple existing FQDN Address Objects into a single logical container for easier policy management. Which object type should they use?

Accepted Answer

Static Address Group. Address Groups can contain FQDN objects to simplify policy rulebases.

Answer

Dynamic Address Group

Answer

Service Group

Answer

Region Object

Question 9

Which THREE steps are required to correctly implement User-ID mapping using the Windows-based User-ID agent?

Accepted Answer

Install the User-ID agent on a Windows server.. The agent must be installed, configured to monitor logs, and the firewall must be told to query the agent.

Answer

Install the GlobalProtect agent on all workstations.

Answer

Set the firewall to use a captive portal for all users.

Question 10

Which TWO items must be matched in a QoS policy?

Accepted Answer

Source Zone. QoS policies match on the Source/Destination zones, Source/Destination addresses, and the App-ID to determine the QoS class.

Answer

Security Profile

Answer

NAT Pool

Answer

User Group