NetSec-Analyst

Review 28 NETSEC-ANALYST practice questions with answer explanations and community insights.

Question 1

A security administrator is creating an internet of things (IoT) Security policy and needs to select behaviors for the trafficю Which characteristic has the greatest impact to the risk level of applications?

  1. Used by Malware
  2. Pervasive
  3. Tunnels Other Apps
  4. Known Vulnerabilities

Question 2

DNS rewrite can only be configured on a NAT rule with which type of destination address translation?

  1. Dynamic IP and Port (DIPP)
  2. Dynamic IP (with session distribution)
  3. Static IP
  4. Dynamic IP

Question 3

Based on the image below, what is a risk associated with this configuration?

  1. Min Version setting of TLSvl 3 can cause compatibility issues with legacy applications or clients.
  2. Authentication algorithm selections can significantly increase resource consumption and cause performance degradation.
  3. Encryption algorithms 3DES and RC4 being disabled decreases security posture.
  4. Max Version setting of "Max" enables the use of Perfect Forward Secrecy (PFS) and cannot be decrypted.

Question 4

Which action ensures that sensitive information such as medical records, financial transactions, and legal communications are not decrypted and that they maintain strong security?

  1. Create a log forwarding filter to exclude sensitive information.
  2. Disable decryption globally to avoid exposing sensitive data.
  3. Create an SSL Inbound Inspection policy to identify users sending sensitive information.
  4. Create a no-decrypt policy for traffic matching specific URL categories.

Question 5

An alert indicates that multiple internal endpoints are communicating with a known malicious IP address, and the analyst needs to identify the scope of this activity by using Log Viewer. What is the first step in identifying which internal hosts have communicated with the malicious IP address and determining the extent of the communication?

  1. Filter the traffic logs by the known endpoint IP addresses.
  2. Filter the traffic logs by the DNS Server's IP address.
  3. Filter the traffic logs by the NGFWs IP addresses.
  4. Filter the traffic logs by the malicious IP address.
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.