Question 1

To use Active Directory to authenticate administrators, which server profile is required in the authentication profile?

Options :

A : domain controller

B : TACACS+

C : LDAP

D : RADIUS

Answer: C

Question 2

The compliance officer requests that all evasive applications need to be blocked on all perimeterfirewalls out to the internet The firewall is configured with two zones;1. trust for internal networks2. untrust to the internetBased on the capabilities of the Palo Alto Networks NGFW, what are two ways to configure a security policy using App-ID to comply with this request? (Choose two )

Options :

A : Create a deny rule at the top of the policy from trust to untrust with service application-default and add an application filter with the evasive characteristic

B : Create a deny rule at the top of the policy from trust to untrust over any service and select evasive as the application

C : Create a deny rule at the top of the policy from trust to untrust with service application-default and select evasive as the application

D : Create a deny rule at the top of the policy from trust to untrust over any service and add an application filter with the evasive characteristic

Answer: A,D

Question 3

How can a complete overview of the logs be displayed to an administrator who has permission in the system to view them?

Options :

A : Select the unified log entry in the side menu.

B : Modify the number of columns visible on the page

C : Modify the number of logs visible on each page.

D : Select the system logs entry in the side menu.

Answer: A

Question 4

An administrator needs to allow users to use only certain email applications.How should the administrator configure the firewall to restrict users to specific email applications?

Options :

A : Create an application filter and filter it on the collaboration category, email subcategory.

B : Create an application group and add the email applications to it.

C : Create an application filter and filter it on the collaboration category.

D : Create an application group and add the email category to it.

Answer: B

Question 5

Which two statements are correct about App-ID content updates? (Choose two.)

Options :

A : Updated application content may change how security policy rules are enforced

B : After an application content update, new applications must be manually classified prior to use

C : Existing security policy rules are not affected by application content updates

D : After an application content update, new applications are automatically identified and classified

Answer: A,D

Confidently Practice Online with Free NetSec-Analyst Exam Cram

Buying Options: