Free Palo Alto Networks Network Security Analyst Exam NetSec-Analyst Exam Practice Test

What can be used as match criteria for creating a dynamic address group?

• Usernames
• IP addresses
• Tags
• MAC addresses

In which two types of NAT can oversubscription be used? (Choose two.)

• Static IP
• Destination NAT
• Dynamic IP and Port (DIPP)
• Dynamic IP

Which security profile will provide the best protection against ICMP floods, based on individual combinations of a packet`s source and destination IP address?

• DoS protection
• URL filtering
• packet buffering
• anti-spyware

You need to allow users to access the office–suite application of their choice. How should you configure the firewall to allow access to any office-suite application?

• Create an Application Group and add Office 365, Evernote Google Docs and Libre Office
• Create an Application Group and add business-systems to it.
• Create an Application Filter and name it Office Programs, then filter it on the office programs subcategory.
• Create an Application Filter and name it Office Programs then filter on the business-systems category.

When creating a Panorama administrator type of Device Group and Template Admin, which two things must you create first? (Choose two.)

• password profile
• access domain
• admin rote
• server profile

An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

• Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory
• Create an Application Group and add business-systems to it
• Create an Application Filter and name it Office Programs, then filter it on the business-systems category
• Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office

Which two configuration settings shown are not the default? (Choose two.)

• Enable Security Log
• Server Log Monitor Frequency (sec)
• Enable Session
• Enable Probing

In which two Security Profiles can an action equal to the block IP feature be configured? (Choosetwo.)

• URL Filtering
• Vulnerability Protection
• Antivirus b
• Anti-spyware

When HTTPS for management and GlobalProtect are enabled on the same data plane interface, which TCP port is used for management access?

• 80
• 443
• 4443
• 8443

Which path in PAN-OS 10.0 displays the list of port-based security policy rules?

• Policies> Security> Rule Usage> No App Specified
• Policies> Security> Rule Usage> Port only specified
• Policies> Security> Rule Usage> Port-based Rules
• Policies> Security> Rule Usage> Unused Apps