Palo Alto Networks Certified Network Security Analyst Free Sample Questions

Antivirus (Block), Anti-Spyware (Block), URL Filtering (Alert), File Blocking (Block 'upload' for specific categories)

Antivirus (Alert), Anti-Spyware (Sinkhole), Vulnerability Protection (Block), File Blocking (Alert all)

Vulnerability Protection (Block), URL Filtering (Block 'file-sharing'), WildFire Analysis (Public Cloud), Data Filtering (Block credit cards)

Antivirus (Block), Anti-Spyware (Block), URL Filtering (Continue), File Blocking (Block-continue)

SSL Inbound Inspection with a rule to exclude 'financial-services' and 'health-and-medicine' URL categories.

SSL Forward Proxy with a No-Decrypt rule matching 'financial-services' and 'health-and-medicine' URL categories, placed above the Decrypt rule.

SSL Forward Proxy with a Decrypt rule that includes a Decryption Profile with 'Block sessions with unsupported versions' enabled.

SSH Proxy with a custom URL category for banking sites set to 'Exclude'.

The Security Policy using the EDL was not committed after the EDL object was created.

The EDL 'Check for updates' frequency is set to 'Daily' or a significantly longer interval than the feed's update cycle.

The EDL source URL is using HTTP instead of HTTPS.

The maximum number of entries for the EDL type has been exceeded.

Create a Custom URL Category and list every single IP address of the partner portals.

Create a Custom URL Category using exact string matching for the top-level domains.

Create a Custom URL Category and use URL Pattern Matching (wildcards/regex) to match the specific path convention (e.g., */partner-portal/*).

Create a Custom Application using a signature that looks for the HTTP Host header.

Create two separate Data Security Profiles: one for blocking Credit Cards and one for alerting SSNs, and apply both to the same security policy.

Create a single Data Security Profile with two rules: Rule A matches 'Credit Card Numbers' with action 'Block', and Rule B matches 'Social Security Numbers' with action 'Alert'.

Create a File Blocking Profile instead, as Data Filtering cannot block traffic.

Configure the 'Credit Card' data pattern as a 'Critical' severity threat in the Vulnerability Protection Profile.

Create one Log Forwarding Profile item for 'Traffic' (All) and another item for 'Threat' with a filter (severity eq critical) or (severity eq high).

Create two separate Log Forwarding Profiles and apply both to the security policy.

Configure the Strata Logging Service to drop low severity logs at the ingestion point.

Select 'Critical' and 'High' checkboxes in the Global Log Settings.

Path Quality Profile

Traffic Distribution Profile

Zone Protection Profile

SCTP Profile

Activate the IoT Security subscription and configure a Log Forwarding Profile to send logs to the Data Lake (Strata Logging Service).

Manually create Device Objects for every IoT device.

Configure a DoS Protection Profile for the IoT zone.

Enable User-ID on the IoT VLANs.

Classified protection applies thresholds to a single specific IP address (source or destination), whereas Aggregate applies to the total traffic matching the rule.

Classified protection is for secret government data, while Aggregate is for public data.

Aggregate protection consumes fewer resources than Classified protection.

Classified protection is applied to Zone Protection Profiles, while Aggregate is applied to DoS Protection Policies.

True

False