Palo Alto Networks NetSec-Generalist Practice Test - Questions Answers

List of questions
Question 1

When a user works primarily from a remote location but reports to the corporate office several times a month, what does GlobalProtect use to determine if the user should connect to an internal gateway?
ICMP ping to Panorama management interface
User login credentials
External host detection
Reverse DNS lookup of preconfigured host IP
Question 2

What will collect device information when a user has authenticated and connected to a GlobalProtect gateway?
RADIUS Authentication
IP address
Host information profile (HIP)
Session ID
Question 3

After a Best Practice Assessment (BPA) is complete, it is determined that dynamic updates for Cloud-Delivered Security Services (CDSS) used by company branch offices do not match recommendations. The snippet used for dynamic updates is currently set to download and install updates weekly.
Knowing these devices have the Precision Al bundle, which two statements describe how the settings need to be adjusted in the snippet? (Choose two.)
Applications and threats should be updated daily.
Antivirus should be updated daily.
WildFire should be updated every five minutes.
URL filtering should be updated hourly.
Question 4

Which Panorama centralized management feature allows native and third-party integrations to monitor VM-Series NGFW logs and objects?
Plugin
Template
Device Group
Log Forwarding profile
Question 5

Which two components of a Security policy, when configured, allow third-party contractors access to internal applications outside business hours? (Choose two.)
User-ID
Schedule
Service
App-ID
Question 6

Which two policies in Strata Cloud Manager (SCM) will ensure the personal data of employees remains private while enabling decryption for mobile users in Prisma Access? (Choose two.)
SSH Decryption
SSL Inbound Inspection
SSL Forward Proxy
No Decryption
Question 7

Which firewall attribute can an engineer use to simplify rule creation and automatically adapt to changes in server roles or security posture based on log events?
Dynamic Address Groups
Dynamic User Groups
Predefined IP addresses
Address objects
Question 8

Which two tools can be used to configure Cloud NGFWs for AWS? (Choose two.)
Cortex XSIAM
Cloud service provider's management console
Prisma Cloud management console
Panorama
Question 9

Which tool will help refine a security rule by specifying the applications it has viewed in past weeks?
Security Lifecycle Review (SLR)
Custom Reporting
Autonomous Digital Experience Management (ADEM)
Policy Optimizer
Question 10

An administrator has imported a pair of firewalls to Panorama under the same template stack. As a part of the template stack, the administrator wants to create a high availability (HA) template to be shared by the firewalls.
Which dynamic component should the administrator use when setting the Peer HA1 IP address?
Template stack
Template variable
Address object
Dynamic Address Group
Question