NetSec-Analyst

NetSec-Analyst practice questions, page 4 of 5, with answer review and explanations.

Question 16

Which log type should be checked first using Log Viewer when a user reports being unable to access a specific website?

  1. Firewall/URL
  2. Firewall/Traffic
  3. Firewall/Threat
  4. Firewall/DNS Security

Question 17

What is the most granular method for ensuring that traffic to a firewall’s public IP address on the public interface is translated to the private IP address of the web server?

  1. Create one NAT policy, ensure the policy has original packet destination IP as the public IP address and translated packet destination IP as the private IP address, and mark Bi-directional as "Yes."
  2. Create one NAT policy, set the source address to the public IP address and destination address to the private IP address, and ensure Bi-directional is checked.
  3. Create two static NAT policies, ensure one policy has original packet destination IP as the public IP address and translated packet destination IP as the private IP address, ensure the other policy has original packet source IP as the private IP address and the translated packet source IP as the public IP address.
  4. Create one NAT policy, ensure the policy has original packet source IP as the private IP address and the translated packet source IP as the public IP address, and mark Bi-directional as "Yes."

Question 18

What are two valid pattern types in a Data Filtering profile? (Choose two.)

  1. Custom Dictionary
  2. Proximity Pattern
  3. File Properties
  4. Regular Expression

Question 19

A security analyst is using the Strata Cloud Manager (SCM) Policy Optimizer to create specific and focused rules. The analyst accepts the new rules from Policy Optimizer and updates the rule base, but the traffic does not hit these new rules. Which action needs to be taken to resolve this issue?

  1. Execute a push configuration
  2. Remove the original Security policy rule
  3. Enable the newly created Security policy rules
  4. Perform a commit

Question 20

Which action ensures that a Panorama push will not fail due to pending local firewall changes?

  1. Commit configurations locally on the device and then repeat the same configuration from Panorama.
  2. Disable "Merge with Device Candidate Config."
  3. Enable "Force Template Values."
  4. Enable both options "Include Device and Network Templates" and "Include Firewall Clusters."