NetSec-Analyst無料問題集「Palo Alto Networks Network Security Analyst」

質問 1

What is the order of processing when both Policy Based Forwarding (PBF) policies and routing table entries are involved?

（A）The firewall performs a simultaneous evaluation of both PBF policies and the routing table, and then it chooses the route with the lowest metric.

（B）The firewall evaluates PBF policies first; if a packet matches a PBF rule, the specified next-hop in that rule overrides the routing table.

（C）The firewall evaluates the routing table that is using the longest prefix match and then applies any matching PBF rule to override the next-hop.

（D）The firewall evaluates static routes, then dynamic routes, and then it applies PBF policies to adjust the next-hop.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

An analyst notices latency on the firewall and wants to improve performance. Which steps can be taken to reduce management plane CPU while working to determine the underlying problem?

（A）Enable log forwarding from the firewall to an external destination.

（B）Enable logging for intrazone-default and interzone-default security rules.

（C）Disable log at session end and only log at session start.

（D）Disable log at session start and only log at session end.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

A network security analyst is having difficulty configuring a data protection setup to find references to company secret information. The phrases and words that indicate secret information are not unique and can show up in publicly available assets. Which steps will result in a successful configuration?

（A）Create a custom data pattern with basic regular expression, then use expression quantifiers to validate that the secret information is being matched an appropriate number of times.

（B）Create two data dictionaries, one with all the key phrases and the other with phrases that would disqualify the secrecy. Use the first dictionary in a primary rule and the second in the secondary rule.

（C）Create a custom data pattern with weighted regular expression, weight the key phrases positively, and weight information that would disqualify negatively.

（D）Create a custom data pattern with regular expression for the key phrases and proximity keywords containing what is typically around those phrases when it is secret.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Which two actions can be defined in a decryption profile? (Choose two)

（A）Perform DNS sinkholing

（B）Block expired certificates

（C）Block unsupported versions

（D）Strip X-Forwarded-For headers

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

An admin observes that a security policy rule using Content-ID is not blocking executable file downloads as intended. Which configuration step is most likely missing?

（A）Decryption policy for outbound traffic

（B）Correct zone match on the destination

（C）NAT policy on the source zone

（D）Proper File Blocking profile attached to the security rule

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

When using Strata Cloud Manager (SCM), which tool allows an analyst to automatically migrate local firewall configurations to a centralized management folder?

（A）Template Variable

（B）Strata Cloud Manager Transition

（C）Config Audit

（D）Policy Optimizer

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

A security administrator needs to block access to a specific list of 500 malicious domains. These domains are updated daily by a third-party intelligence feed. What is the most efficient way to manage these domains as an object?

（A）Add the domains to the "Block List" of a URL Filtering profile.

（B）Create an External Dynamic List (EDL) of type "Domain."

（C）Create a Custom URL Category and manually paste the domains daily.

（D）Create a Domain-based FQDN Address Group.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

NetSec-Analyst 無料問題集「Palo Alto Networks Network Security Analyst」

弊社を連絡する

関連リンク

トップ試験