Free Palo Alto Networks NetSec-Pro Exam Dumps Questions & Answers

In which order does an NGFW process URL categories for Security policy?

• A.  1. Custom URL categories
  2. External dynamic lists
  3. Predefined categories
• B.  1. External dynamic lists
  2. Custom URL categories
  3. Predefined categories
• C.  1. Custom URL categories
  2. Predefined categories
  3. External dynamic lists
• D.  1. Predefined categories
  2. External dynamic lists
  3. Custom URL categories

By default, how often are signatures updated for firewalls with Advanced WildFire?

• A.  In real time
• B.  Once a week
• C.  Within 24-48 hours
• D.  Within 5-10 minutes

Which two configurations are required when creating deployment profiles to migrate a perpetual VM-Series firewall to a flexible VM? (Choose two.)

• A.  Allow only the same security services as the perpetual VM.
• B.  Allocate the same number of vCPUs as the perpetual VM.
• C.  Deploy virtual Panorama for management.
• D.  Choose "Fixed vCPU Models" for configuration type.

A network security engineer has created a Security policy in Prisma Access that includes a negated region in the source address. Which configuration will ensure there is no connectivity loss due to the negated region?

• A.  Set the service to be application-default.
• B.  Create a Security policy for the negated region with destination address "any".
• C.  Add all regions that contain private IP addresses to the source address.
• D.  Add a Dynamic Application Group to the Security policy.

Which two modes should be enabled on the GlobalProtect agent to allow a subset of users to connect directly to SaaS and internal applications while allowing the remaining users to connect through third-party VPN? (Choose two.)

• A.  Tunnel
• B.  Remote desktop protocol (RDP)
• C.  Clientless
• D.  Proxy