Question 1

Which type of administrator account cannot be used to authenticate user traffic flowing through thefirewallsdata plane?

Options :

A : Kerberos user

B : SAML user

C : local database user

D : local user

Answer: B

Question 2

The compliance officer requests that all evasive applications need to be blocked on all perimeterfirewalls out to the internet The firewall is configured with two zones;1. trust for internal networks2. untrust to the internetBased on the capabilities of the Palo Alto Networks NGFW, what are two ways to configure a security policy using App-ID to comply with this request? (Choose two )

Options :

A : Create a deny rule at the top of the policy from trust to untrust with service application-default and add an application filter with the evasive characteristic

B : Create a deny rule at the top of the policy from trust to untrust over any service and select evasive as the application

C : Create a deny rule at the top of the policy from trust to untrust with service application-default and select evasive as the application

D : Create a deny rule at the top of the policy from trust to untrust over any service and add an application filter with the evasive characteristic

Answer: A,D

Question 3

Which feature would be useful for preventing traffic from hosting providers that place fewrestrictions on content, whose services are frequently used by attackers to distribute illegal orunethical material?

Options :

A : Palo Alto Networks Bulletproof IP Addresses

B : Palo Alto Networks C&C IP Addresses

C : Palo Alto Networks Known Malicious IP Addresses

D : Palo Alto Networks High-Risk IP Addresses

Answer: A

Question 4

Which stage of the cyber-attack lifecycle makes it important to provide ongoing education to userson spear phishing links, unknown emails, and risky websites?

Options :

A : reconnaissance

B : delivery

C : exploitation

D : installation

Answer: B

Question 5

For the firewall to use Active Directory to authenticate users, which Server Profile is required in the Authentication Profile?

Options :

A : TACACS+

B : RADIUS

C : LDAP

D : SAML

Answer: C

Confidently Practice Online with Free NetSec-Analyst Exam Cram

Buying Options: