Palo Alto Networks Network Security Professional - NetSec-Pro Free Exam Questions

A. Source & Destination Zone = Colorado
Users = Testers
Application = Payment System
Action = Deny

B. Source & Destination Zone = Colorado
Users = Testers
Application = Any
Action = Deny

C. Source Zone = Colorado
Destination Zone = LA
Users = Testers
Application = Any
Action = Deny

D. Source Zone = Colorado
Destination Zone = LA
Users = Testers
Application = Payment System
Action = Deny

A. Add all regions that contain private IP addresses to the source address.

B. Add a Dynamic Application Group to the Security policy.

C. Set the service to be application-default.

D. Create a Security policy for the negated region with destination address "any".

A. During license activation

B. After all required installation and setup procedures are completed

C. After activating registration and completing license deployment profile

D. During installation

A. Configure DNS Security signature policy settings to sinkhole malicious DNS queries.

B. Create overrides for all company owned FQDNs.

C. Create a decryption policy rule to decrypt DNS-over-TLS / port 853 traffic.

D. Enable Advanced Threat Prevention with default settings and only focus on high-risk traffic.

A. Backup-based deployment

B. Disabling all policies before upgrade

C. Multi-phase firmware staging

D. Zero-downtime upgrade architecture

A. Always-On VPN with HIP checks

B. Threat Prevention

C. Secure Decryption Proxy

D. URL Filtering

A. Enable SSL decryption on the Security policy rule processing the traffic.

B. Create a custom URL Filtering profile to block C2 and phishing categories.

C. Install the latest Advanced Threat Prevention content update from the software center.

D. Enable the inline-cloud-analysis action within the organization's active anti-spyware profile.

A. Cloud Identity Engine

B. App-ID Cloud Engine

C. SaaS Data Security

D. App-ID

A. Antivirus

B. Anti-spyware

C. URL Filtering

D. Vulnerability Protection