Sample questions
Certified Network Security Professional (NetSec-Pro) practice questions
An administrator needs to restrict access to a specific internal server to only one remote VPN user. What is the most secure method?
An administrator is configuring a Site-to-Site VPN and needs to ensure that the tunnel interface is included in the routing table. What must be done to ensure traffic can be routed…
Which CLI command is most effective for verifying if a specific packet is being blocked by a security policy in real-time?
Which feature would you use to verify that a specific interface is properly connected to the upstream ISP?
A user is unable to access an application via GlobalProtect. The logs show the user is authenticated, but the session is reset. What should the administrator check first?
Which THREE components are involved in configuring an IKE Gateway for a VPN?
You are deploying Advanced URL Filtering. How does the 'Credential Phishing' prevention feature operate?
You are troubleshooting a connection that is being blocked despite a matching policy. Which tool is best for determining which specific rule is hitting the traffic?
Which plane on a Palo Alto Networks firewall is responsible for the web interface and CLI?
Which TWO items can be used as match criteria in a Security Policy rule?
You are configuring App-ID for an application that uses non-standard ports. You have created a custom application object, but the traffic is still being identified as 'incomplete'.…
What is the purpose of a 'Security Profile Group'?
Which THREE of the following are valid Security Profile types?
A administrator needs to ensure that users are authenticated before accessing a web-based internal application. Which User-ID method provides the most granular control by prompting…
You are configuring a 'Strict' security profile for a web server. Which profile action is best suited to block known exploit patterns while allowing the traffic?
An administrator notices intermittent packet loss in a GlobalProtect deployment where users connect via IPv6. Which configuration change is likely to resolve the issue if MTU fragm…
An administrator wants to use DHCP to assign IP addresses to GlobalProtect clients. Where is this setting configured?
You are configuring Advanced URL Filtering. Users report that a site is being blocked, but the category is 'Newly Registered Domains'. How can you allow access to this specific sit…
Where is the configuration located to enable the 'DNS Security' service on a specific security zone?
When troubleshooting a BGP peering issue between a Palo Alto Networks firewall and an ISP, which log should be reviewed to see state changes and neighbor messages?
When troubleshooting a site-to-site VPN that is stuck in 'INIT' status, what is the most likely cause?
What is the primary function of the 'DNS Sinkhole' feature in a DNS Security profile?
When using OSPF with a Palo Alto Networks firewall, which area type would you configure to ensure the firewall does not receive external routing information while still maintaining…
Which THREE items must be verified when troubleshooting traffic that is not being correctly identified as the intended application?