NetSec-Pro Platform Solutions Services And Tools Practice Test 2 — 15 Questions

Question 1

You are troubleshooting an issue where a specific Threat Prevention profile is not applying correctly via Panorama. The setting is configured in a Template, but the firewall shows a different value. What should you check?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The order of the templates within the Template Stack.. Template Stacks can have multiple templates, and the order dictates which takes precedence for shared objects.

Answer

The local device group lockdown setting.

Answer

The Panorama log collector status.

Answer

The firewall's OS version compatibility.

Question 2

Which SCM feature allows you to view the health status of your entire global firewall deployment?

Accepted Answer

Dashboard. The SCM 'Dashboard' provides a high-level overview, including device health and connectivity status.

Answer

Report Generator

Answer

Device Inventory

Answer

Policy Monitor

Question 3

What is the primary function of the 'Panorama' context in the Web UI of a managed firewall?

Accepted Answer

To view read-only policies and objects pushed from Panorama.. When a firewall is managed by Panorama, the 'Panorama' menu context allows you to view pushed policies and configuration objects.

Answer

To configure local security policies.

Answer

To change the Panorama server IP address.

Answer

To initiate a direct sync request to Panorama.

Question 4

An administrator notices that the 'Commit' progress on Panorama hangs at 99%. What is the most effective way to troubleshoot this?

Accepted Answer

Check the 'Tasks' menu in Panorama for detailed error logs on the specific job.. The task manager in Panorama shows the status of ongoing jobs, and clicking on the job ID reveals detailed logs of the push process.

Answer

Reboot the Panorama appliance.

Answer

Clear the configuration cache on the firewall.

Answer

Increase the timeout value in Management Settings.

Question 5

You are using SCM to manage firewall policies. You want to audit who made a specific change to a security policy rule. Which feature should you use?

Accepted Answer

Audit Logs / Configuration Logs. The 'Audit Log' or 'Configuration Log' in SCM tracks all changes, including the timestamp and the administrator who performed the action.

Answer

System Logs

Answer

Threat Logs

Answer

Device Health Logs

Question 6

You need to create a global address object that is available to all firewalls managed by Panorama. Where should you define this?

Accepted Answer

In the 'Shared' device group.. Shared objects are defined in the 'Shared' device group to make them available across all devices.

Answer

In the local firewall's Address tab.

Answer

In the root Template stack.

Answer

In the Policy Optimizer.

Question 7

When a firewall is managed by Panorama, where is the authoritative configuration stored?

Accepted Answer

On the Panorama appliance.. Panorama serves as the central management point, making its configuration the 'source of truth' for managed devices.

Answer

On the local firewall only.

Answer

In the cloud-based license portal.

Answer

On each firewall's local storage independently.

Question 8

You are using the 'Policy Optimizer' in Panorama to identify unused rules. After identifying a rule, what is the safest way to remove it?

Accepted Answer

Disable the rule and monitor for issues, then delete after a set period.. Policy Optimizer allows for safe rule removal by tracking 'hits' over time, ensuring the rule is truly redundant.

Answer

Export the policy to CSV and re-import.

Answer

Immediately delete the rule.

Answer

Rename the rule to 'Old_Rule' and leave it.

Question 9

You are managing firewalls across multiple time zones using Panorama. Where do you configure the time zone for the managed firewalls?

Accepted Answer

In a Panorama Template.. Time zone settings are part of the Device configuration, which is managed via Panorama Templates.

Answer

In the global system settings of Panorama.

Answer

In the Device Group settings.

Answer

In the log forwarding profile.

Question 10

Which THREE types of information are contained in the Panorama 'Device Health' report?

Accepted Answer

CPU utilization. Device health reports track resource utilization and system status, essential for enterprise monitoring.

Answer

Security policy hit counts

Answer

Active user count

Question 11

Which THREE configuration elements are commonly managed via Panorama Templates?

Accepted Answer

NTP server settings. Templates manage network and device-level settings like interface configurations, DNS, and NTP settings.

Answer

Address objects

Answer

Security policy rules

Question 12

Which TWO actions are required to successfully onboard a new firewall to Strata Cloud Manager?

Accepted Answer

Register the device serial number in the SCM inventory.. Onboarding requires both the registration of the device serial number and the establishment of the management connection (auth key).

Answer

Configure a static route to the SCM cloud URL.

Answer

Create a local admin user with full permissions.

Answer

Enable Panorama mode on the firewall.

Question 13

Which TWO factors contribute to 'Configuration Drift' between a firewall and Panorama?

Accepted Answer

Local administrators making changes directly on the firewall CLI.. Drift occurs when local changes are made to a managed device, or when policies are pushed that fail to overwrite existing local settings.

Answer

The firewall is in 'Read-Only' mode.

Answer

Panorama is offline during a policy push.

Answer

Using different versions of Pan-OS on Panorama and the firewall.

Question 14

Which TWO steps are involved in the process of replacing a failed firewall that is managed by Panorama?

Accepted Answer

Push the configuration to the new device using the existing Device Group.. Replacing a hardware unit requires adopting the existing configuration and assigning the new serial number to the existing device entry.

Answer

Re-license every feature manually.

Answer

Create a new Device Group for the replacement.

Answer

Reset the firewall to factory defaults.

Question 15

Which THREE features are provided by the Strata Cloud Manager 'Subscription Management' interface?

Accepted Answer

View expiration dates for security subscriptions.. SCM provides centralized visibility into license status, expiration, and automated renewal/deployment workflows.

Answer

Generate license renewal quotes.

Answer

Configure threat signature update frequency.