NetSec-Analyst Quick Quiz — 10 Questions

Question 1

Which type of account is typically used to manage Palo Alto Networks assets in the Customer Support Portal?

Accepted Answer

Customer Support Portal account. A Customer Support Portal (CSP) account allows users to view registered assets, manage licenses, and open support tickets.

Answer

Default 'admin' account

Answer

Strata Cloud Manager admin account

Answer

Local Administrator account

Question 2

Which THREE actions occur when a 'Commit' is executed on a firewall?

Accepted Answer

Updating the running configuration file.. The commit process validates the syntax, saves the configuration file, and applies the changes to the system's data plane.

Answer

Automatically upgrading the PAN-OS version.

Answer

Purging all existing log entries.

Question 3

Which object category is used to group various network services to simplify policy definitions?

Accepted Answer

Service Group. Service Groups are used to bundle individual service objects together.

Answer

Tag Group

Answer

Address Group

Answer

Profile Group

Question 4

Where do you go in SCM to manage all your network objects in one location?

Accepted Answer

Objects tab. The 'Objects' tab is the centralized location for creating and managing all configuration objects.

Answer

Policies tab

Answer

Monitor tab

Answer

Device Settings tab

Question 5

Which section of the NGFW GUI allows an administrator to configure local administrative accounts?

Accepted Answer

Device > Administrators. Device > Administrators is where local admin accounts and their roles are defined.

Answer

Network > Users

Answer

Device > Setup > Management

Answer

Objects > Access

Question 6

How can an administrator ensure that only specific IP addresses can access the firewall management interface?

Accepted Answer

By configuring an Allowed IP list in the Management Interface settings.. Management Interface Settings (in Device > Setup) allow for the definition of an allowed IP address list for management access.

Answer

By using a static route.

Answer

By adding an explicit Deny policy in the security policy list.

Answer

By enabling MFA on the local admin account.

Question 7

A firewall is reporting 'License Expired' for Threat Prevention. The administrator renewed the license in the Support Portal. What is the most likely cause for the warning to persist?

Accepted Answer

The administrator has not clicked 'Retrieve license keys from license server'.. Often, the firewall has not yet synced its local database with the updated information on the Palo Alto Networks license server.

Answer

The firewall needs a firmware upgrade.

Answer

The license server is down.

Answer

The Threat Prevention license is not compatible with the current PAN-OS version.

Question 8

What action should be taken before upgrading the PAN-OS version on a production firewall?

Accepted Answer

Take a configuration snapshot.. Taking a backup (configuration snapshot) is the most critical step to ensure a recovery path exists if the upgrade fails.

Answer

Delete all existing logs.

Answer

Change the management IP address.

Answer

Disable all security policies.

Question 9

Which TWO of the following are valid methods for performing a configuration backup on a firewall?

Accepted Answer

Exporting the configuration file via Device > Setup > Operations.. Backups can be performed manually via the GUI or automatically using scheduled export to an SCP/SFTP server.

Answer

Performing a hard reset.

Answer

Taking a snapshot of the interface status.

Answer

Using the 'save config' command in the CLI.

Question 10

Which THREE items are required to successfully register a new firewall in the Customer Support Portal?

Accepted Answer

Valid Customer Support Portal account.. Registration requires the hardware serial number, the registration authorization code, and a valid account.

Answer

A list of all connected switch ports.

Answer

The public SSH key of the firewall.