NetSec-Analyst 試験問題を無料オンラインアクセス

A Palo Alto Networks NGFW for a high-security environment is being configured and requires a security profile group that includes vulnerability protection. When configuring the action based on the severity of the threat types, what does Palo Alto Networks recommend?

• A.Use action "default" for critical, high, and medium vulnerabilities.
• B.Use action "reset-both" for critical, high, and medium vulnerabilities.
• C.Use action "allow" for critical high, and medium vulnerabilities.
• D.Use action "alert" for critical, high, and medium vulnerabilities.

Which set of actions will allow an administrator to handle traffic redirection most efficiently when degradation occurs on a specific SaaS application that has an on-premises backup?

• A.Use Advanced SD-WAN to create SaaS Quality profiles and Path Quality profiles with appropriate SLA levels, then create a Traffic Distribution profile set for "top down" with a DIA interface first and the SD-WAN path that leads to on-premises backup second. Use these in an SD-WAN rule.
• B.Use Policy-Based Forwarding (PBF) to create a rule that sends sessions for the SaaS application to the on-premises backup, then create a path monitor with "wait-recover" selected. Ensure that
  "enforce symmetric return" is enabled for the rule so failures do not create routing loops.
• C.Use VPN tunneling to create tunnels between the branches and the SaaS application provider with a backup tunnel pointing to the on-premises backup. Use OSPF to determine the shortest path to reach the application which will reconverge when there is a failure.
• D.Use Advanced Routing Engine to create a logical router with BGP, then set up a new AS routing environment. Peer the AS to the SaaS company's AS and redistribute routes from the SaaS company's AS with BGP Filtering profile for the application-specific traffic.

When pushing a configuration from Panorama to multiple firewalls, an analyst wants to ensure that a specific local interface setting on one firewall is not overwritten by the template value.
Which feature should be used?

• A.Template Stack
• B.Template Variable
• C.Policy Optimizer
• D.Device Group Override

Which type of Security profile is required to prevent a "Brute Force" attack on a management portal or server by monitoring the rate of connection attempts?

• A.Anti-Spyware Profile
• B.Vulnerability Protection Profile
• C.URL Filtering Profile
• D.Antivirus Profile

What is a benefit of using Strata Cloud Manager (SCM) snippets in Security policy deployment?

• A.They enable real-time firewall monitoring for network anomalies.
• B.They allow reusable policy components that can be applied to multiple firewalls and folders.
• C.They automatically adjust firewall configurations based on traffic patterns.
• D.They eliminate the need for any manual configuration to Security policies.