最新的Palo Alto Networks NetSec-Analyst免費考試真題

問題1

There are intermittent connectivity issues between two internal zones on a PA-Series firewall.
Although the Security policies appear correctly configured, traffic between the zones is experiencing unexpected drops. Which troubleshooting step will isolate the root cause of this behavior?

A. Use the CLI command show system info to monitor CPU and memory usage, ensuring that resource constraints are not causing interfaces to drop packets between zones.

B. Use the PAN-OS GUI Troubleshooting tool to review interface status, verify zone assignments, and confirm that all links are operational.

C. Use the CLI command show system state filter sys.s1.* | match Error to find interface errors across all the interfaces.

D. Use the CLI command tcpdump filter and set the source and destination zones in the filter to capture and analyze traffic flows between zones, checking for packet loss on the data plane.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題2

When performing a "Push to Devices" from Panorama, an analyst wants to ensure that the push only affects a specific firewall in a shared Device Group. Which option in the push window allows this granular selection?

A. Include Device and Network Templates

B. Edit Selections

C. Force Template Values

D. Merge with Device Candidate Config

正確答案: B

說明：（僅 Fast2test 成員可見）

問題3

Strata Logging Service is experiencing an issue with log retention because the quota has been filled. While the manager works with Palo Alto Networks to potentially increase the quota, an administrator is asked to ensure certain logs are given priority to meet compliance requirements, as the company has not approved increased budgets. Which steps should the administrator take to meet compliance without incurring additional cost?

A. Gather the information on the log types used for compliance reporting, then reallocate appropriate quota percentages in the configure page.

B. Make a custom report in Strata Cloud Manager (SCM) for the needed areas then clear the Strata Log Service logs used in the report after the report is made.

C. Download all logs to ensure they are retained then clear the Strata Logging Service tenant so new logs can flow again.

D. Create a new AWS account and S3 bucket, then create a Log Forwarding profile that sends all logs to the S3 bucket.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題4

A security manager asks for automated guidance on several OS security advisories released by Palo Alto Networks. Which steps can be taken on Strata Cloud Manager (SCM) to respond to the request?

A. Insights → Application Experience → Application Domains, add a filter for usage source, generate a weekly report.

B. Insights → Activity Insights → Threats, add a filter for threat category, review the logs, generate a weekly report.

C. Dashboard → PAN-OS CVEs, select the CVEs to review, generate upgrade recommendations.

D. Dashboard → Security Posture Insights, set time range to past 90 days, look at regressing scores in particular, generate a weekly report.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題5

What is the most granular method for ensuring that traffic to a firewall's public IP address on the public interface is translated to the private IP address of the web server?

A. Create one NAT policy, set the source address to the public IP address and destination address to the private IP address, and ensure Bi-directional is checked.

B. Create one NAT policy, ensure the policy has original packet destination IP as the public IP address and translated packet destination IP as the private IP address, and mark Bi-directional as
"Yes."

C. Create one NAT policy, ensure the policy has original packet source IP as the private IP address and the translated packet source IP as the public IP address, and mark Bi-directional as "Yes."

D. Create two static NAT policies, ensure one policy has original packet destination IP as the public IP address and translated packet destination IP as the private IP address, ensure the other policy has original packet source IP as the private IP address and the translated packet source IP as the public IP address.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題6

In the context of Palo Alto Networks SD-WAN configuration, what is the primary purpose of a Link Tag within an SD-WAN Interface Profile??

A. To group multiple physical links for traffic distribution and path selection

B. To specify the IP addressing scheme for SD-WAN interfaces?

C. To define the security policies applied to SD-WAN interfaces

D. To assign a unique identifier to each physical interface

正確答案: A

問題7

A company wants to ensure that all internal users are prevented from uploading sensitive documents to a specific personal cloud storage site. Which Security profile is specifically designed to inspect the content of file transfers for specific data patterns?

A. Data Filtering Profile

B. File Blocking Profile

C. WildFire Analysis Profile

D. Vulnerability Protection Profile

正確答案: A

說明：（僅 Fast2test 成員可見）

最新的Palo Alto Networks Network Security Analyst - NetSec-Analyst免費考試真題

聯系我們

站內鏈接

最新更新