Palo Alto Networks Network Security Professional (NetSec-Pro) Free Practice Test

Question 1

Which two configurations are required when creating deployment profiles to migrate a perpetual VM-Series firewall to a flexible VM? (Choose two.)

A. Allow only the same security services as the perpetual VM.

B. Choose "Fixed vCPU Models" for configuration type.

C. Allocate the same number of vCPUs as the perpetual VM.

D. Deploy virtual Panorama for management.

Correct Answer: A,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which two security services are required for configuration of NGFW Security policies to protect against malicious and misconfigured domains? (Choose two.)

A. SaaS Security

B. Advanced DNS Security

C. Advanced Threat Prevention

D. Advanced WildFire

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which functionality does an NGFW use to determine whether new session setups are legitimate or illegitimate?

A. SYN flood protection

B. SYN cookies

C. SYN bit

D. Random Early Detection (RED)

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

What is a necessary step for creation of a custom Prisma Access report on Strata Cloud Manager (SCM)?

A. Set up Cloud Identity Engine.

B. Open a support ticket.

C. Configure a dashboard.

D. Generate a PDF summary report.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which step is necessary to ensure an organization is using the inline cloud analysis features in its Advanced Threat Prevention subscription?

A. Enable SSL decryption in Security policies to inspect and analyze encrypted traffic for threats.

B. Configure Advanced Threat Prevention profiles with default settings and only focus on high-risk traffic to avoid affecting network performance.

C. Update or create a new anti-spyware security profile and enable the appropriate local deep learning models.

D. Disable anti-spyware to avoid performance impacts and rely solely on external threat intelligence.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

What additional feature is included in Premium GlobalProtect subscriptions?

A. Secure Decryption Proxy

B. URL Filtering

C. Always-On VPN with HIP checks

D. Threat Prevention

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which feature of SaaS Security will allow a firewall administrator to identify unknown SaaS applications in an environment?

A. Cloud Identity Engine

B. App-ID Cloud Engine

C. SaaS Data Security

D. App-ID

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Which offering can be managed in both Panorama and Strata Cloud Manager (SCM)?

A. VM-Series Next-Generation Firewall (NGFW)

B. Autonomous Digital Experience Manager (ADEM)

C. Prisma SD-WAN

D. SaaS Security

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Palo Alto Networks Network Security Professional (NetSec-Pro) Free Practice Test