試験NetSec-Analyst トピック1 問題43 スレッド

Palo Alto Networks NetSec-Analystのリアル試験問題集
問題 #: 43
トピック #: 1

A company wants to implement a 'kill switch' for critical applications. In case of a severe security incident, they need to instantly block all outbound traffic to a specific set of critical external services. The list of these services might change rapidly. How can External Dynamic Lists be leveraged for the most agile response in this scenario?

A. Create an EDL with all critical service IPs and URLs, set its update frequency to 'Every Minute', and configure a security policy with a deny rule.

B. Maintain a local file on the firewall with the list of critical services and manually update it during an incident.

C. Use a script to dynamically update a custom URL category, which is then blocked by a URL filtering profile.

D. Pre-configure an EDL containing a single, dummy IP address. During an incident, update the EDL source file on an internal web server with the actual critical service IPs/URLs, and the firewall will fetch the changes.

E. Integrate with a SOAR platform that can directly push policy updates to the firewall to block the services.

おすすめの解答：D 解答を投票する

Option D offers the most agile response using EDLs. By pre-configuring the EDL, the firewall is already set up to pull updates. The 'kill switch' is activated by modifying the source file on the internal web server. The firewall will then fetch these changes based on its configured refresh interval (which should be short). Option A is good but 'Every Minute' might still be too slow for an 'instant' kill switch and assumes the list is always complete. Option B is manual and not agile. Option C uses URL categories, which are distinct from EDLs, and the dynamic update mechanism needs to be robust. Option E is a valid approach but goes beyond just leveraging EDLs for agile response; it involves a more complex SOAR integration.

铃木** 2026-06-25 03:09:37

時間限定で

15%

オフ

プレミアムのNetSec-Analyst問題集のセルフテストエンジンまたはPDFをゲットしよう

弊社を連絡する

我々は１２時間以内ですべてのお問い合わせを答えます。

オンラインサポート時間：( UTC+9 ) 9:00-24:00
月曜日から土曜日まで

サポート：現在連絡

試験NetSec-Analyst トピック1 問題43 スレッド

コメント

弊社を連絡する

関連リンク

トップ試験