Free Palo Alto Networks NetSec-Analyst Exam Dumps Questions & Answers

How would a Security policy need to be written to allow outbound traffic using Secure Shell (SSH) to destination ports tcp/22 and tcp/4422?

• A.  The admin creates a Security policy allowing application "ssh" and service "application-default".
• B.  The admin creates a custom service object named "tcp-4422" with port tcp/4422.
  The admin also creates a custom service object named "tcp-22" with port tcp/22.
  The admin then creates a Security policy allowing application "ssh", service "tcp-4422". and service
  "tcp-22".
• C.  The admin creates a custom service object named "tcp-4422" with port tcp/4422.
  The admin then creates a Security policy allowing application "ssh" and service "tcp-4422".
• D.  The admin creates a custom service object named "tcp-4422" with port tcp/4422.
  The admin then creates a Security policy allowing application "ssh", service "tcp-4422". and service
  "application-default".

Which statement best describes a common use of Policy Optimizer?

• A.  Policy Optimizer can add or change a Log Forwarding profile for each Security policy selected.
• B.  Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists. Admins can then manually enable policies they want to keep and delete ones they want to remove.
• C.  Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications.
• D.  Policy Optimizer can display which Security policies have not been used in the last 90 days.

What does an application filter help you to do?

• A.  It dynamically filters applications based on critical, high, medium, low. or informational severity.
• B.  It dynamically provides application statistics based on network, threat, and blocked activity,
• C.  It dynamically groups applications based on application attributes such as category and subcategory.
• D.  It dynamically shapes defined application traffic based on active sessions and bandwidth usage.

Which license must an administrator acquire prior to downloading Antivirus updates for use with the firewall?

• A.  WildFire
• B.  Threat Prevention
• C.  Antivirus
• D.  URL filtering

What are the two main reasons a custom application is created? (Choose two.)

• A.  To reduce unidentified traffic on a network
• B.  To change the default categorization of an application
• C.  To visually group similar applications
• D.  To correctly identify an internal application in the traffic log