Which two configurations are required when creating deployment profiles to migrate a perpetual VM-Series firewall to a flexible VM? (Choose two.)

Allocate the same number of vCPUs as the perpetual VM.

Choose 'Fixed vCPU Models' for configuration type.

Allocate the same number of vCPUs as the perpetual VM.

Deploy virtual Panorama for management.

Allow only the same security services as the perpetual VM.

What is the most efficient way in Strata Cloud Manager (SCM) to apply a Security policy to all ten firewalls in one data center?

Create a folder that groups the ten firewalls together, then create the Security policy at that configuration scope.

Create the Security policy on each firewall individually.

Set the configuration scope to 'Global' and create the Security policy.

Create the Security policy at any configuration scope, then clone it to the ten firewalls.

Create a folder that groups the ten firewalls together, then create the Security policy at that configuration scope.

A network engineer needs to configure a Prisma SD-WAN environment to optimize and secure traffic flow between branch offices and the data center.Which action should the engineer prioritize to achieve the most operationally efficient communication?

Configure dynamic path selection based on network performance metrics.

Ensure all branch office traffic is routed through a central hub for inspection.

Create NAT policies to translate internal branch IP addresses to public IP addresses.

Define security zones for branch offices and the data center.

Configure dynamic path selection based on network performance metrics.

Why would an enterprise architect use a Zero Trust Network Access (ZTNA) connector instead of a service connection for private application access?

It controls traffic from the mobile endpoint to any of the organization's internal resources.

It functions as the attachment point for IPSec-based connections to remote site or branch networks.

It supports traffic sourced from on-premises or public cloud-based resources to mobile users and remote networks.

It automatically discovers private applications and suggests Security policy rules for them.

A firewall administrator wants to segment the network traffic and prevent noncritical assets from being able to access critical assets on the network.Which action should the administrator take to ensure the critical assets are in a separate zone from the noncritical assets?

Logically separate physical and virtual interfaces to control the traffic that passes across the interface.

Create a deny Security policy with 'any' set for both the source and destination zones.

Create an allow Security policy with 'any' set for both the source and destination zones.

Logically separate physical and virtual interfaces to control the traffic that passes across the interface.

Assign a single interface to multiple security zones.

A security administrator is adding a new sanctioned cloud application to SaaS Data Security.After authentication, how does the tool gain API access for monitoring?

It receives a token from the cloud application for establishing and maintaining a secure connection.

It transmits the configured SAML user profile to the cloud application for security event attribution.

It establishes an encrypted key pair with the cloud application to safely transmit user data.

It generates a certificate and sends it to the cloud application for TLS decryption and inspection.

It receives a token from the cloud application for establishing and maintaining a secure connection.

With Strata Cloud Manager (SCM), which action will efficiently manage Security policies across multiple cloud providers and on-premises data centers?

Use snippets and folders to define and enforce uniform Security policies across environments.

Use the 'Feature Adoption' visibility tab on a weekly basis to make adjustments across the network.

Allow each cloud provider's native security tools to handle policy enforcement independently.

Create and manage separate Security policies for each environment to address specific needs.

What is the primary role of Advanced DNS Security in protecting against DNS-based threats?

It uses machine learning (ML) to detect and block malicious domains in real-time.

It replaces traditional DNS servers with more reliable and secure ones.

It centralizes all DNS management and simplifies policy creation.

It automatically redirects all DNS traffic through encrypted tunnels.

It uses machine learning (ML) to detect and block malicious domains in real-time.

What are two ways to create an App-ID for unknown applications? (Choose two.)

Create a custom application by using signatures.

Provide a packet capture to Palo Alto Networks and request an App-ID.

Create a custom application by using signatures.

Create a security profile that maps the signature to the unknown application.

Use WildFire API to map signatures to the unknown application.

Palo Alto Networks NetSec-Generalist Practice Test 2 - Free Online Exam Questions 41-60

How many places will a firewall administrator need to create and configure a custom data loss prevention (DLP) profile across Prisma Access and the NGFW?

Become a Premium Member for full access

Unlock Premium Member

Palo Alto Networks NetSec-Generalist Practice Test 2

Question

Palo Alto Networks NetSec-Generalist Practice Tests

Practice Tests