NetSec-Generalist Practice Test

Review 60 NETSEC-GENERALIST practice questions with answer explanations and community insights.

Question 1

Which Cloud-Delivered Security Services (CDSS) solution is required to configure and enable Advanced DNS Security?

  1. Advanced WildFire
  2. Enterprise SaaS Security
  3. Advanced Threat Prevention
  4. Advanced URL Filtering

Question 2

Which statement best demonstrates a fundamental difference between Content-ID and traditional network security methods?

  1. Content-ID inspects traffic at the application layer to provide real-time threat protection.
  2. Content-ID focuses on blocking malicious IP addresses and ports.
  3. Traditional methods provide comprehensive application layer inspection.
  4. Traditional methods block specific applications using signatures.

Question 3

Based on the image below, which source IP address will be seen in the data filtering logs of the Cloud NGFW for AWS with the default rulestack settings?

  1. 10.1.1.3
  2. 20.10.10.16
  3. 20.10.10.15
  4. 10.1.1.2

Question 4

A network administrator is using DNAT to map two servers to one public IP address. Traffic will be directed to a specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic. Which two sets of Security policy rules will accomplish this configuration? (Choose two.)

  1. Source: Untrust (Any) Destination: Untrust - Application(s): web-browsing - Action: allow
  2. Source: Untrust (Any) Destination: Trust - Application(s): web-browsing, ssh Action: allow
  3. Source: Untrust (Any) Destination: DMZ - Application(s): web-browsing - Action: allow
  4. Source: Untrust (Any) Destination: DMZ - Application(s): ssh - Action: allow

Question 5

Which two configurations are required when creating deployment profiles to migrate a perpetual VM-Series firewall to a flexible VM? (Choose two.)

  1. Choose "Fixed vCPU Models" for configuration type.
  2. Allocate the same number of vCPUs as the perpetual VM.
  3. Deploy virtual Panorama for management.
  4. Allow only the same security services as the perpetual VM.