NetSec-Analyst

NetSec-Analyst practice questions, page 3 of 5, with answer review and explanations.

Question 11

A team of analysts uses four NGWFs with the Precision Al Bundle, SaaS Security Inline, and Strata Cloud Manager Pro Collectively this secures all company assets across the data center and two remote sites. A security incident requires the team to review a mobile user, John Doe. During the audit, the team prompts, "How was the application experience for John Doe over the past 60 days?” What is an expected response from Strata Copilot?

  1. "The average application test score for 'john.doe’ over the past 60 days is 37.67."
  2. "The user ’John.Doe' encountered a total of 219 threats in the last 3 hours."
  3. "The top three threats impacting John Doe are phishing, SQL injections, and ransomware."
  4. "Your organization doesn’t have ADEM."

Question 12

A company requires that all file transfers only over HTTP (tcp/80 and tcp/8080) to SaaS storage must be inspected for data exfiltration. Traffic to encrypted HTTPS SaaS storage cannot be inspected based on the company decryption restrictions. When using a security profile group, which Security policy configuration meets this requirement?

  1. One with data filtering to inspect all HTTP traffic on the web-browsing application using application-default for the service.
  2. One with URL filtering and file blocking to block all file uploads to the URL category online-storage-and-backup, then set the service to tcp/80 and tcp/8080.
  3. One with data filtering and the service set to tcp/80 and tcp/8080, then verify block threshold is set to "1" to stop exfiltration.
  4. One with data filtering and an application filter that matches "file-sharing" applications, then set the service to tcp/80 and tcp/8080.

Question 13

A financial company is deploying NGFWs with the Advanced SD-WAN subscription to improve uptime and bandwidth across thousands of ATMs. The company requires that traffic flows to the internal application needed by the ATMs always use the path with the lowest latency and packet loss. Which unique SD-WAN rule parameters meet this criteria?

  1. Application/Service: "Internal Application for ATMs" → Path Selection: "Best Available Path" in Traffic Distribution Profile.
  2. Application/Service: "Internal Application for ATMs" & "Management" in Path Quality Profile → Path Selection "Any."
  3. Application/Service: "Internal Application for ATMs" → Path Selection "Weighted Distribution" in Traffic Distribution Profile.
  4. Application/Service: "Internal Application for ATMs" & "ATM Path(Custom)" in Path Quality Profile → Path Selection "Any."

Question 14

To comply with new regulations, an organization requires all traffic logs related to the "HR-App" application across all Security policies be sent to a compliance syslog server. A Log Forwarding profile already exists to send logs to a default syslog server. What is the most efficient process for configuring an NGFW to comply with the new regulations without disrupting existing traffic logs being sent to the default syslog server?

  1. Edit the existing Log Forwarding profile by adding a new match list consisting of Log Forwarding filter for the application named "HR-App" to direct logs to the compliance syslog server.
  2. Create a new Log Forwarding profile, update the profile with the details of the compliance syslog server and attach the profile to the relevant Security policy rule.
  3. Edit the existing Log Forwarding profile, add a new entry, use the filter builder to match on application "HR-App," and add the details for the compliance syslog server.
  4. Create a Log Forwarding profile and enable the predefined filter for "Application" In the associated dropdown, select or create a new application object with the name "HR-App," and add the details for the compliance syslog server.

Question 15

Which aspect of a network’s current health does the Strata Cloud Manager (SCM) Device Health dashboard provide?

  1. Health trends based on which CVEs are not remediated.
  2. Health score based on current physical hardware issues detected.
  3. Health score based on security profile feature adoption.
  4. Health trends for firewalls filtered by how long the issue has been experienced.