Free Palo Alto Networks NetSec-Generalist Exam Dumps Questions & Answers

Which statement best demonstrates a fundamental difference between Content-ID and traditional network security methods?

• A.  Content-ID inspects traffic at the application layer to provide real-time threat protection.
• B.  Traditional methods provide comprehensive application layer inspection.
• C.  Content-ID focuses on blocking malicious IP addresses and ports.
• D.  Traditional methods block specific applications using signatures.

Infrastructure performance issues and resource constraints have prompted a firewall administrator to monitor hardware NGFW resource statistics.
Which AlOps feature allows the administrator to review these statistics for each firewall in the environment?

• A.  Host information profile (HIP)
• B.  Capacity Analyzer
• C.  Security Posture Insights
• D.  Policy Analyzer

Which Security profile should be queried when investigating logs for upload attempts that were recently blocked due to sensitive information leaks?

• A.  Antivirus
• B.  URL Filtering
• C.  Anti-spyware
• D.  Data Filtering

Refer to the exhibit.

A network administrator is using DNAT to map two servers to one public IP address. Traffic will be directed to a specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.
Which two sets of Security policy rules will accomplish this configuration? (Choose two.)

• A.  Source: Untrust (Any) Destination: DMZ Application(s): web-browsing Action: allow
• B.  Source: Untrust (Any) Destination: Untrust Application(s): web-browsing Action: allow
• C.  Source: Untrust (Any) Destination: DMZ Application(s): ssh Action: allow
• D.  Source: Untrust (Any) Destination: Trust Application(s): web-browsing, ssh Action: allow

A company has an ongoing initiative to monitor and control IT-sanctioned SaaS applications. To be successful, it will require configuration of decryption policies, along with data filtering and URL Filtering Profiles used in Security policies.
Based on the need to decrypt SaaS applications, which two steps are appropriate to ensure success? (Choose two.)

• A.  Validate which certificates will be used to establish trust.
• B.  Configure SSL Forward Proxy.
• C.  Create new self-signed certificates to use for decryption.
• D.  Configure SSL Inbound Inspection.