NetSec-Pro Infrastructure Management And CDSS — All Questions With Answers

Question 1mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A network administrator needs to verify that the firewall is successfully communicating with the WildFire cloud service. Which CLI command provides the most relevant connectivity information?

Question 2mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

Which action is required to ensure that WildFire analysis results are applied to traffic as quickly as possible?

Question 3easymultiple choice

Read the full DNS explanation →

An administrator needs to ensure that only specific subdomains are permitted under a top-level domain while blocking the rest using DNS Security. Which configuration approach is most effective?

Question 4hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A company uses a proxy server. How must the Palo Alto Networks firewall be configured to ensure 'Threat Prevention' is effective?

Question 5mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

An administrator wants to audit all security policies to see which ones are not currently using a 'Security Profile'. Which tool is best for this?

Question 6easymultiple choice

Read the full DNS explanation →

Where is the configuration located to enable the 'DNS Security' service on a specific security zone?

Question 7mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

You need to ensure that files uploaded to a specific server are scanned by WildFire. Which setting ensures this?

Question 8mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

When managing infrastructure, what is the best practice for handling 'Security Profile Groups'?

Question 9mediummulti select

Read the full Infrastructure Management And CDSS explanation →

Which TWO criteria are used by the firewall to match a security policy rule?

Question 10hardmulti select

Read the full Infrastructure Management And CDSS explanation →

Which THREE settings are required in a File Blocking profile to ensure that all executable files are blocked and submitted to WildFire?

Question 11mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

When managing WildFire, how can you ensure that you are receiving the latest threat signatures as soon as they are generated?

Question 12hardmulti select

Read the full Infrastructure Management And CDSS explanation →

Which THREE actions can be taken in a Vulnerability Protection profile?

Question 13easymulti select

Read the full Infrastructure Management And CDSS explanation →

Which TWO locations in the PAN-OS web interface are used to check the status of CDSS subscriptions?

Question 14hardmulti select

Read the full Infrastructure Management And CDSS explanation →

Which THREE types of information can be used to create a custom URL category?

Question 15mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a firewall to decrypt outbound SSL traffic for inspection. After applying the decryption policy, users report that they cannot access their bank's website. The firewall logs show the connection is being decrypted. Which action should the administrator take to allow access while still inspecting other traffic?

Question 16mediummulti select

Read the full Infrastructure Management And CDSS explanation →

A security engineer is configuring a firewall to inspect traffic for threats. The engineer wants to ensure that the firewall performs antivirus scanning, anti-spyware scanning, and vulnerability protection on allowed traffic. Which two components must be configured and applied to the security policy rule to achieve this? (Choose two.)

Question 17hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a firewall to inspect traffic between two internal zones. The administrator wants to ensure that if the firewall's content inspection engines fail, traffic is blocked rather than passed uninspected. Which setting should be configured in the Security Profile Group?

Question 18hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

An administrator has configured a Decryption policy with a Forward Proxy profile to inspect outbound TLS traffic. Users report that connections to a partner's website fail with certificate errors, while all other HTTPS sites work normally. The partner's site presents a certificate signed by an internal CA that is not trusted by the firewall. What is the most appropriate action to resolve this while maintaining decryption for other traffic?

Question 19mediummulti select

Read the full DNS explanation →

A network security team is deploying a CDSS (Cloud-Delivered Security Services) solution and must ensure that DNS-based command-and-control traffic is detected and blocked. Which TWO actions should the team perform? (Choose two.)

Question 20mediummulti select

Read the full Infrastructure Management And CDSS explanation →

A NetSec-Pro administrator is configuring a Decryption profile to enforce best practices for SSL Forward Proxy. The organization wants to ensure that weak protocols and ciphers are blocked, and that untrusted certificates are not accepted. Which two settings should be enabled in the Decryption profile? (Choose two.)

Question 21hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a Palo Alto Networks firewall to perform decryption of inbound SSL traffic to a web server. The administrator wants to ensure that the firewall can decrypt the traffic without installing certificates on external clients. Which certificate should be used for SSL Forward Proxy decryption?

Question 22hardmulti select

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a Palo Alto Networks firewall to apply Security Profiles to traffic. The administrator wants to ensure that the firewall inspects traffic for threats and takes action based on the profiles. Which two actions can be configured in a Security Profile Group to apply multiple profiles to a security policy? (Choose two.)

Question 23mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a Palo Alto Networks firewall to block traffic from known malicious IP addresses. The administrator wants to automate the process of updating the firewall with a list of malicious IPs from an external threat intelligence feed. Which feature should be used to dynamically update a block list?

Question 24easymultiple choice

Read the full DNS explanation →

What is the primary function of the 'DNS Sinkhole' feature in a DNS Security profile?

Question 25hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

You are configuring Advanced URL Filtering. Users report that a site is being blocked, but the category is 'Newly Registered Domains'. How can you allow access to this specific site while keeping the policy for other newly registered domains?

Question 26mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A company is experiencing high false-positive rates with WildFire for custom proprietary executable files. What is the recommended configuration to minimize these while maintaining security?

Question 27hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

An administrator needs to enable Threat Prevention to protect against a specific zero-day exploit. How are the signatures for these new threats delivered to the firewall?

Question 28mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

You are deploying Advanced URL Filtering. How does the 'Credential Phishing' prevention feature operate?

Question 29easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

How does the 'Advanced URL Filtering' subscription improve upon standard URL Filtering?

Question 30hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

What is the impact of selecting 'Action: Reset-Both' in a Threat Prevention profile for a detected vulnerability?

Question 31hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

An administrator finds that the 'Threat Prevention' logs are not showing any data, despite having an active subscription. What is the most likely cause?

Question 32easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

A user is blocked by a URL Filtering profile. Where can you find the specific log entry that explains why the block occurred?

Question 33easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

What is the purpose of a 'Security Profile Group'?

Question 34mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

Which feature allows you to block traffic based on a specific geographic region?

Question 35mediummulti select

Read the full DNS explanation →

Which TWO actions should be performed when configuring a new DNS Security profile to protect against DNS-based malware?

Question 36hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

You need to ensure that the firewall logs identify traffic by the actual application name, even if the traffic is running on a non-standard port. Which mechanism makes this possible?

Question 37hardmulti select

Read the full Infrastructure Management And CDSS explanation →

Which THREE components are required to successfully deploy and use Advanced URL Filtering?

Question 38mediummulti select

Read the full Infrastructure Management And CDSS explanation →

Which TWO pieces of information are displayed in the 'WildFire Analysis' log?

Question 39mediummulti select

Read the full Infrastructure Management And CDSS explanation →

Which TWO steps are necessary to ensure that 'Threat Prevention' is protecting traffic against known vulnerabilities?

Question 40easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

A network security administrator is configuring a firewall to forward traffic to a sandboxing service for analysis. The administrator wants to ensure that any file determined to be malicious by the sandbox is automatically blocked in real time on subsequent attempts. Which feature should be enabled on the firewall to achieve this?

Question 41mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A network security engineer is configuring a firewall to protect against brute force attacks on the web server. The engineer wants to limit the number of concurrent connections from a single IP address to the web server to 50. Which feature should be configured?

Question 42easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

A network administrator is configuring a Palo Alto Networks firewall and wants to ensure that security policy rules are evaluated in the correct order. They have created several rules with different source and destination zones. Which factor determines the order in which security policy rules are evaluated?

Question 43mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security engineer is deploying a new Palo Alto Networks firewall pair in an active/passive high availability configuration. The requirement is that if the active device's link to the upstream core switch fails, the passive device must take over immediately, even if the passive device's own link to that same switch is still up. Which HA configuration satisfies this requirement?

Question 44mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A NetSec-Pro administrator is configuring a firewall to inspect traffic between an internal trusted zone and an external untrusted zone. The security policy allows the traffic, and a security profile group is applied. However, the administrator notices that SSL decryption is not occurring, and encrypted threats are passing uninspected. Which configuration step is required to enable SSL forward proxy decryption?

Question 45hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security operations team is investigating a series of alerts indicating that the firewall is not blocking known malicious files. They have a WildFire license and a File Blocking profile attached to a security policy. However, users are still able to download and execute malicious executables. Which configuration issue is most likely causing this failure?

Question 46easymultiple choice

Read the full DNS explanation →

A NetSec-Pro administrator needs to ensure that the firewall can resolve domain names for its own management services and for DNS sinkholing. Which type of DNS configuration should be set up on the firewall?

Question 47mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A network administrator is configuring a firewall to perform decryption of outbound SSL traffic to inspect for threats. The administrator wants to ensure that traffic to certain categories, such as financial services, is not decrypted due to privacy concerns. Which configuration should be used to achieve this?

Question 48mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A network security administrator is configuring a Palo Alto Networks firewall to integrate with a directory service for user identification. They want to ensure that security policies can enforce rules based on user and group information. Which component must be configured to map IP addresses to user identities?

Question 49hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a Palo Alto Networks firewall to decrypt outbound SSL traffic for inspection. They have enabled SSL Forward Proxy decryption on a security policy rule. However, users report that they are unable to access certain banking websites, and the firewall logs show decryption errors. Which action should the administrator take to resolve this issue while maintaining security?

Question 50mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A NetSec-Pro administrator is configuring a firewall to block known malicious IP addresses. The administrator wants to use a dynamically updated list that is automatically populated from a threat intelligence feed. Which feature should be used?

Question 51mediummulti select

Read the full Infrastructure Management And CDSS explanation →

A network security administrator is configuring a firewall to integrate with a cloud-based threat intelligence service. The administrator wants to automatically block traffic to known malicious IP addresses and domains. Which two actions are required to achieve this? (Choose two.)

Question 52mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A NetSec-Pro administrator is deploying a new branch office firewall. The security team requires that all traffic from the branch to the internet be inspected for threats, but they do not want to decrypt traffic due to privacy concerns. Which type of security profile should be applied to the outbound security policy to detect threats in unencrypted traffic without performing SSL decryption?

Question 53hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A NetSec-Pro administrator is configuring a security policy to allow access to a critical internal application. The application uses a custom TCP port 8443 and requires that the firewall perform threat inspection. The administrator creates a rule allowing the application and attaches a Vulnerability Protection profile. However, users report that the application is not working. After checking the traffic logs, the administrator sees that the sessions are being denied by the 'intrazone-default' rule. What is the most likely cause?

Question 54easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security operations team wants to receive alerts when the firewall detects a critical vulnerability exploit attempt. Which component should be configured to generate these alerts?

Question 55easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

An administrator is configuring a File Blocking profile to prevent users from downloading executable files from the internet. The administrator wants the firewall to block the download but still forward the file hash to WildFire for analysis. Which File Blocking action accomplishes this?

Question 56easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

A NetSec-Pro administrator needs to ensure that the firewall can receive dynamic updates for applications and threats. The administrator has verified that the management interface has internet access. Which service must be configured on the management interface to allow these updates?

Question 57hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security operations team notices that the firewall's threat logs show many 'url-filtering' entries for a business-critical SaaS application, causing help-desk tickets. The application uses multiple domains and its category changes frequently as new domains are registered. The team wants to stop the false positives without broadly allowing the SaaS category. What is the most precise approach?

Question 58easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a Palo Alto Networks firewall to block malicious files. The administrator wants to ensure that files are scanned for threats and that known malicious files are blocked. Which security profile should be used to scan files for viruses and other malware?

Question 1mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A network administrator needs to verify that the firewall is successfully communicating with the WildFire cloud service. Which CLI command provides the most relevant connectivity information?

Question 2mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

Which action is required to ensure that WildFire analysis results are applied to traffic as quickly as possible?

Question 3easymultiple choice

Read the full DNS explanation →

An administrator needs to ensure that only specific subdomains are permitted under a top-level domain while blocking the rest using DNS Security. Which configuration approach is most effective?

Question 4hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A company uses a proxy server. How must the Palo Alto Networks firewall be configured to ensure 'Threat Prevention' is effective?

Question 5mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

An administrator wants to audit all security policies to see which ones are not currently using a 'Security Profile'. Which tool is best for this?

Question 6easymultiple choice

Read the full DNS explanation →

Where is the configuration located to enable the 'DNS Security' service on a specific security zone?

Question 7mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

You need to ensure that files uploaded to a specific server are scanned by WildFire. Which setting ensures this?

Question 8mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

When managing infrastructure, what is the best practice for handling 'Security Profile Groups'?

Question 9mediummulti select

Read the full Infrastructure Management And CDSS explanation →

Which TWO criteria are used by the firewall to match a security policy rule?

Question 10hardmulti select

Read the full Infrastructure Management And CDSS explanation →

Which THREE settings are required in a File Blocking profile to ensure that all executable files are blocked and submitted to WildFire?

Question 11mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

When managing WildFire, how can you ensure that you are receiving the latest threat signatures as soon as they are generated?

Question 12hardmulti select

Read the full Infrastructure Management And CDSS explanation →

Which THREE actions can be taken in a Vulnerability Protection profile?

Question 13easymulti select

Read the full Infrastructure Management And CDSS explanation →

Which TWO locations in the PAN-OS web interface are used to check the status of CDSS subscriptions?

Question 14hardmulti select

Read the full Infrastructure Management And CDSS explanation →

Which THREE types of information can be used to create a custom URL category?

Question 15mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a firewall to decrypt outbound SSL traffic for inspection. After applying the decryption policy, users report that they cannot access their bank's website. The firewall logs show the connection is being decrypted. Which action should the administrator take to allow access while still inspecting other traffic?

Question 16mediummulti select

Read the full Infrastructure Management And CDSS explanation →

A security engineer is configuring a firewall to inspect traffic for threats. The engineer wants to ensure that the firewall performs antivirus scanning, anti-spyware scanning, and vulnerability protection on allowed traffic. Which two components must be configured and applied to the security policy rule to achieve this? (Choose two.)

Question 17hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a firewall to inspect traffic between two internal zones. The administrator wants to ensure that if the firewall's content inspection engines fail, traffic is blocked rather than passed uninspected. Which setting should be configured in the Security Profile Group?

Question 18hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

An administrator has configured a Decryption policy with a Forward Proxy profile to inspect outbound TLS traffic. Users report that connections to a partner's website fail with certificate errors, while all other HTTPS sites work normally. The partner's site presents a certificate signed by an internal CA that is not trusted by the firewall. What is the most appropriate action to resolve this while maintaining decryption for other traffic?

Question 19mediummulti select

Read the full DNS explanation →

A network security team is deploying a CDSS (Cloud-Delivered Security Services) solution and must ensure that DNS-based command-and-control traffic is detected and blocked. Which TWO actions should the team perform? (Choose two.)

Question 20mediummulti select

Read the full Infrastructure Management And CDSS explanation →

A NetSec-Pro administrator is configuring a Decryption profile to enforce best practices for SSL Forward Proxy. The organization wants to ensure that weak protocols and ciphers are blocked, and that untrusted certificates are not accepted. Which two settings should be enabled in the Decryption profile? (Choose two.)

Question 21hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a Palo Alto Networks firewall to perform decryption of inbound SSL traffic to a web server. The administrator wants to ensure that the firewall can decrypt the traffic without installing certificates on external clients. Which certificate should be used for SSL Forward Proxy decryption?

Question 22hardmulti select

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a Palo Alto Networks firewall to apply Security Profiles to traffic. The administrator wants to ensure that the firewall inspects traffic for threats and takes action based on the profiles. Which two actions can be configured in a Security Profile Group to apply multiple profiles to a security policy? (Choose two.)

Question 23mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a Palo Alto Networks firewall to block traffic from known malicious IP addresses. The administrator wants to automate the process of updating the firewall with a list of malicious IPs from an external threat intelligence feed. Which feature should be used to dynamically update a block list?

Question 24easymultiple choice

Read the full DNS explanation →

What is the primary function of the 'DNS Sinkhole' feature in a DNS Security profile?

Question 25hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

You are configuring Advanced URL Filtering. Users report that a site is being blocked, but the category is 'Newly Registered Domains'. How can you allow access to this specific site while keeping the policy for other newly registered domains?

Question 26mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A company is experiencing high false-positive rates with WildFire for custom proprietary executable files. What is the recommended configuration to minimize these while maintaining security?

Question 27hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

An administrator needs to enable Threat Prevention to protect against a specific zero-day exploit. How are the signatures for these new threats delivered to the firewall?

Question 28mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

You are deploying Advanced URL Filtering. How does the 'Credential Phishing' prevention feature operate?

Question 29easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

How does the 'Advanced URL Filtering' subscription improve upon standard URL Filtering?

Question 30hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

What is the impact of selecting 'Action: Reset-Both' in a Threat Prevention profile for a detected vulnerability?

Question 31hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

An administrator finds that the 'Threat Prevention' logs are not showing any data, despite having an active subscription. What is the most likely cause?

Question 32easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

A user is blocked by a URL Filtering profile. Where can you find the specific log entry that explains why the block occurred?

Question 33easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

What is the purpose of a 'Security Profile Group'?

Question 34mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

Which feature allows you to block traffic based on a specific geographic region?

Question 35mediummulti select

Read the full DNS explanation →

Which TWO actions should be performed when configuring a new DNS Security profile to protect against DNS-based malware?

Question 36hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

You need to ensure that the firewall logs identify traffic by the actual application name, even if the traffic is running on a non-standard port. Which mechanism makes this possible?

Question 37hardmulti select

Read the full Infrastructure Management And CDSS explanation →

Which THREE components are required to successfully deploy and use Advanced URL Filtering?

Question 38mediummulti select

Read the full Infrastructure Management And CDSS explanation →

Which TWO pieces of information are displayed in the 'WildFire Analysis' log?

Question 39mediummulti select

Read the full Infrastructure Management And CDSS explanation →

Which TWO steps are necessary to ensure that 'Threat Prevention' is protecting traffic against known vulnerabilities?

Question 40easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

A network security administrator is configuring a firewall to forward traffic to a sandboxing service for analysis. The administrator wants to ensure that any file determined to be malicious by the sandbox is automatically blocked in real time on subsequent attempts. Which feature should be enabled on the firewall to achieve this?

Question 41mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A network security engineer is configuring a firewall to protect against brute force attacks on the web server. The engineer wants to limit the number of concurrent connections from a single IP address to the web server to 50. Which feature should be configured?

Question 42easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

A network administrator is configuring a Palo Alto Networks firewall and wants to ensure that security policy rules are evaluated in the correct order. They have created several rules with different source and destination zones. Which factor determines the order in which security policy rules are evaluated?

Question 43mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security engineer is deploying a new Palo Alto Networks firewall pair in an active/passive high availability configuration. The requirement is that if the active device's link to the upstream core switch fails, the passive device must take over immediately, even if the passive device's own link to that same switch is still up. Which HA configuration satisfies this requirement?

Question 44mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A NetSec-Pro administrator is configuring a firewall to inspect traffic between an internal trusted zone and an external untrusted zone. The security policy allows the traffic, and a security profile group is applied. However, the administrator notices that SSL decryption is not occurring, and encrypted threats are passing uninspected. Which configuration step is required to enable SSL forward proxy decryption?

Question 45hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security operations team is investigating a series of alerts indicating that the firewall is not blocking known malicious files. They have a WildFire license and a File Blocking profile attached to a security policy. However, users are still able to download and execute malicious executables. Which configuration issue is most likely causing this failure?

Question 46easymultiple choice

Read the full DNS explanation →

A NetSec-Pro administrator needs to ensure that the firewall can resolve domain names for its own management services and for DNS sinkholing. Which type of DNS configuration should be set up on the firewall?

Question 47mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A network administrator is configuring a firewall to perform decryption of outbound SSL traffic to inspect for threats. The administrator wants to ensure that traffic to certain categories, such as financial services, is not decrypted due to privacy concerns. Which configuration should be used to achieve this?

Question 48mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A network security administrator is configuring a Palo Alto Networks firewall to integrate with a directory service for user identification. They want to ensure that security policies can enforce rules based on user and group information. Which component must be configured to map IP addresses to user identities?

Question 49hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a Palo Alto Networks firewall to decrypt outbound SSL traffic for inspection. They have enabled SSL Forward Proxy decryption on a security policy rule. However, users report that they are unable to access certain banking websites, and the firewall logs show decryption errors. Which action should the administrator take to resolve this issue while maintaining security?

Question 50mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A NetSec-Pro administrator is configuring a firewall to block known malicious IP addresses. The administrator wants to use a dynamically updated list that is automatically populated from a threat intelligence feed. Which feature should be used?

Question 51mediummulti select

Read the full Infrastructure Management And CDSS explanation →

A network security administrator is configuring a firewall to integrate with a cloud-based threat intelligence service. The administrator wants to automatically block traffic to known malicious IP addresses and domains. Which two actions are required to achieve this? (Choose two.)

Question 52mediummultiple choice

Read the full Infrastructure Management And CDSS explanation →

A NetSec-Pro administrator is deploying a new branch office firewall. The security team requires that all traffic from the branch to the internet be inspected for threats, but they do not want to decrypt traffic due to privacy concerns. Which type of security profile should be applied to the outbound security policy to detect threats in unencrypted traffic without performing SSL decryption?

Question 53hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A NetSec-Pro administrator is configuring a security policy to allow access to a critical internal application. The application uses a custom TCP port 8443 and requires that the firewall perform threat inspection. The administrator creates a rule allowing the application and attaches a Vulnerability Protection profile. However, users report that the application is not working. After checking the traffic logs, the administrator sees that the sessions are being denied by the 'intrazone-default' rule. What is the most likely cause?

Question 54easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security operations team wants to receive alerts when the firewall detects a critical vulnerability exploit attempt. Which component should be configured to generate these alerts?

Question 55easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

An administrator is configuring a File Blocking profile to prevent users from downloading executable files from the internet. The administrator wants the firewall to block the download but still forward the file hash to WildFire for analysis. Which File Blocking action accomplishes this?

Question 56easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

A NetSec-Pro administrator needs to ensure that the firewall can receive dynamic updates for applications and threats. The administrator has verified that the management interface has internet access. Which service must be configured on the management interface to allow these updates?

Question 57hardmultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security operations team notices that the firewall's threat logs show many 'url-filtering' entries for a business-critical SaaS application, causing help-desk tickets. The application uses multiple domains and its category changes frequently as new domains are registered. The team wants to stop the false positives without broadly allowing the SaaS category. What is the most precise approach?

Question 58easymultiple choice

Read the full Infrastructure Management And CDSS explanation →

A security administrator is configuring a Palo Alto Networks firewall to block malicious files. The administrator wants to ensure that files are scanned for threats and that known malicious files are blocked. Which security profile should be used to scan files for viruses and other malware?