NetSec-Analyst practice questions, page 5 of 5, with answer review and explanations.
Question 21
A network security analyst is evaluating the impact of quantum computing and post-quantum encryption algorithms. While researching the NGFWs, the analyst finds logs in the decryption view that read, "Client only supports Post-Quantum Algorithms." Upon discussing this finding with the team, a decision is made to accept the sessions. Which action must the analyst perform on the NGFWs to support this decision?
Remove the applications from the predefined decryption exclusions global list.
Create "no decrypt" policies or decryption exclusions for the applications in scope.
Create a decryption profile that supports the algorithms found in the logs.
Enable hybrid post-quantum cryptography support for web traffic.
Question 22
An organization is experiences issues with user security testing and training in which a contracted phishing tester's messages are being blocked before they get to the users. It is determined the NGFWs are blocking the traffic, and that the firewall administrator needs to resolve the issue and allow the messages through. The administrator sees that the data loss prevention (DLP) engine appears to catch the traffic because there is sensitive data in the messages, and in review, finds at least 50 different patterns that have been caught. Which two steps are required for the administrator to complete the request? (Choose two.)
Create an external dynamic list of the data patterns found, then output it to a csv or txt based file, and use the Custom Data Pattern to write a pattern that will recognize the information.
Ask the tester to supply a list of the tester's data types in csv or txt file format, and use the files to create a custom data dictionary.
Create a new Advanced Data Profile with the Primary Rule set to include the custom detection method object and "Any," verify the resulting Data Rule is set to "Alert."
Create a new Classic Data Profile with the Secondary Rule set to include the custom detection method object and "Any," and verify the resulting Data Rule is set to "Alert."
Question 23
A custom spyware signature that includes implementing a pattern match for the HTTP header content and HTTP message body is being created. Which type of context should be used for the standards within the signature?