Join the discussion
Question 27/121
Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)
Correct Answer: D
Add Comments
- Other Question (121q)
- Q1. How would a Security policy need to be written to allow outbound traffic using Secure Shel...
- Q2. An analyst is creating a "Data Pattern" for DLP that needs to match a specific 10-digit cu...
- Q3. Prior to a maintenance-window activity, the administrator would like to make a backup of o...
- Q4. An organization relies heavily on Microsoft Remote Desktop Protocol (RDP) for administrati...
- Q5. An administrator wants to create a No-NAT rule to exempt a flow from the default NAT rule....
- Q6. A company is experiencing performance issues with their cloud-based CRM application (e.g.,...
- Q7. Users from the internal zone need to be allowed to Telnet into a server in the DMZ zone. C...
- Q8. Which order of steps is the correct way to create a static route?...
- Q9. A Palo Alto Networks firewall is configured with Decryption profiles for inbound SSL/TLS t...
- Q10. What is a primary benefit of using "Templates" within Panorama or Strata Cloud Manager?...
- Q11. Given the image, which two options are true about the Security policy rules. (Choose two.)...
- Q12. A large enterprise utilizes a Palo Alto Networks firewall for its perimeter security. They...
- Q13. Which Security profile can you apply to protect against malware such as worms and Trojans?...
- Q14. A Palo Alto Networks Network Security Analyst notices a pattern of 'DNS sinkhole' logs in ...
- Q15. Which action ensures that sensitive information such as medical records, financial transac...
- Q16. Which URL Filtering profile action would you set to allow users the option to access a sit...
- Q17. Given the topology, which zone type should zone A and zone B to be configured with? (Exhib...
- Q18. In the context of Palo Alto Networks SD-WAN configuration, what is the primary purpose of ...
- Q19. A network administrator creates an intrazone security policy rule on a NGFW. The source zo...
- Q20. There are intermittent connectivity issues between two internal zones on a PA-Series firew...
- Q21. Assume a custom URL Category Object of "NO-FILES" has been created to identify a specific ...
- Q22. Where within the URL Filtering security profile must a user configure the action to preven...
- Q23. Based on the show security policy rule would match all FTP traffic from the inside zone to...
- Q24. In Strata Cloud Manager (SCM), which logical container is used to group firewalls that sha...
- Q25. With Strata Cloud Manager (SCM) or Panorama, customers can monitor and manage which three ...
- Q26. An analyst is configuring a security policy to allow an application that uses a dynamic ra...
- Q27. Given the screenshot, what are two correct statements about the logged traffic? (Choose tw...
- Q28. Which firewall feature do you need to configure to query Palo Alto Networks service update...
- Q29. The firewall sends employees an application block page when they try to access Youtube. Wh...
- Q30. A Palo Alto Networks firewall is performing SSL Forward Proxy decryption. An analyst obser...
- Q31. When creating a custom URL category object, which is a valid type?...
- Q32. Which type of administrative role must you assign to a firewall administrator account, if ...
- Q33. At which point in the app-ID update process can you determine if an existing policy rule i...
- Q34. Which prevention technique will prevent attacks based on packet count?...
- Q35. An analyst notices latency on the firewall and wants to improve performance. Which steps c...
- Q36. Which log type is the most useful for identifying if a user is repeatedly attempting to vi...
- Q37. Which interface type requires no routing or switching but applies Security or NAT policy r...
- Q38. A Security Administrator is tasked with preventing the exfiltration of sensitive HR data (...
- Q39. A network has 10 domain controllers, multiple WAN links, and a network infrastructure with...
- Q40. Which object would an administrator create to block access to all high-risk applications?...
- Q41. A security analyst is reviewing an SD-WAN profile implemented via Panorama'. They notice a...
- Q42. A security administrator wants to determine which action a URL Filtering profile will take...
- Q43. An organization relies heavily on Palo Alto Networks firewalls for perimeter security. The...
- Q44. Which the app-ID application will you need to allow in your security policy to use faceboo...
- Q45. (Exhibit) An administrator is updating Security policy to align with best practices. Which...
- Q46. You are deploying a new application on a Palo Alto Networks firewall and need to create a ...
- Q47. Based on the graphic, what is the purpose of the SSL/TLS Service profile configuration opt...
- Q48. When using Strata Cloud Manager (SCM), which tool allows an analyst to automatically migra...
- Q49. A company is implementing a zero-trust architecture. As part of this, they need to restric...
- Q50. Which definition describes the guiding principle of the zero-trust architecture?...
- Q51. A Palo Alto Networks firewall is experiencing frequent 'URL Filtering: category-not-resolv...
- Q52. Which action would an administrator take to ensure that a service object will be available...
- Q53. An analyst wants to create a custom application for an internal tool that uses a specific ...
- Q54. Review the Screenshot: (Exhibit) Given the network diagram, traffic must be permitted for ...
- Q55. Your company is highly concerned with their Intellectual property being accessed by unauth...
- Q56. A critical server application relies on a set of custom web services running on non-standa...
- Q57. An analyst needs to configure a NAT policy to allow internal users to access the internet....
- Q58. What are the two default behaviors for the intrazone-default policy? (Choose two.)...
- Q59. A malware incident involving compromised internal hosts communicating with a command-and- ...
- Q60. Which Security policy match condition would an administrator use to block traffic from IP ...
- Q61. Which Security profile would you apply to identify infected hosts on the protected network...
- Q62. How often does WildFire release dynamic updates?...
- Q63. A security analyst is investigating a complex NAT issue on a Palo Alto Networks firewall. ...
- Q64. Which path is used to save and load a configuration with a Palo Alto Networks firewall?...
- Q65. Which two options does the firewall use to dynamically populate address group members? (Ch...
- Q66. A security administrator needs to block access to a specific list of 500 malicious domains...
- Q67. Where in Panorama Would Zone Protection profiles be configured?...
- Q68. According to a customer's CIO, who is upgrading PAN-OS versions, "Finding issues and then ...
- Q69. A large enterprise uses a Palo Alto Networks firewall to manage Internet access. They have...
- Q70. Which plane on a Palo alto networks firewall provides configuration logging and reporting ...
- Q71. An organization relies heavily on cloud applications. Due to compliance requirements, they...
- Q72. The PowerBall Lottery has reached an unusually high value this week. Your company has deci...
- Q73. An organization is troubleshooting a complex PBF deployment. They have multiple PBF rules,...
- Q74. A cybersecurity firm manages numerous Palo Alto Networks firewalls for clients, leveraging...
- Q75. An analyst needs to create a security rule to allow access to a specific web application t...
- Q76. A firewall administrator implementing Palo Alto Networks best practices on the company fir...
- Q77. An enterprise is deploying a new containerized application infrastructure, using Kubernete...
- Q78. A security auditor requests a report detailing all network connections that leveraged a de...
- Q79. After configuring an EDL with a source URL, the firewall logs show "Unable to fetch extern...
- Q80. Which protocol used to map username to user groups when user-ID is configured?...
- Q81. An enterprise is facing a unique challenge with its SD-WAN deployment. They have a custom,...
- Q82. Which two features implement one-to-one translation of a source IP address while allowing ...
- Q83. A security architect is designing an automated incident response playbook within their Sec...
- Q84. A security analyst needs to create a custom URL category for a new phishing campaign targe...
- Q85. Actions can be set for which two items in a URL filtering security profile? (Choose two.)...
- Q86. An organization is migrating its data to cloud storage platforms like AWS S3 and Azure Blo...
- Q87. An administrator notices that protection is needed for traffic within the network due to m...
- Q88. A network security analyst is attempting to push a new security policy configuration to a ...
- Q89. Which link in the web interface enables a security administrator to view the security poli...
- Q90. At which stage of the cyber-attack lifecycle would the attacker attach an infected PDF fil...
- Q91. Which type of profile must be applied to the Security policy rule to protect against buffe...
- Q92. A systems engineer (SE) successfully demonstrates NGFW managed by Strata Cloud Manager (SC...
- Q93. Which Palo Alto network security operating platform component provides consolidated policy...
- Q94. An administrator manages a network with 300 addresses that require translation. The admini...
- Q95. Which SCM feature allows an administrator to see a "Safety Score" for a proposed policy ch...
- Q96. A Palo Alto Networks firewall is reporting consistently high data plane CPU utilization (a...
- Q97. Which order of steps is the correct way to create a static route?...
- Q98. Consider the following firewall policy configuration snippet from a Panorama managed firew...
- Q99. When performing a "Push to Devices" from Panorama, an analyst wants to ensure that the pus...
- Q100. To what must an interface be assigned before it can process traffic?...
- Q101. What is the purpose of the automated commit recovery feature?...
- Q102. Which file is used to save the running configuration with a Palo Alto Networks firewall?...
- Q103. What do you configure if you want to set up a group of objects based on their ports alone?...
- Q104. In which two types of NAT can oversubscription be used? (Choose two.)...
- Q105. An analyst needs to prevent users from downloading executable files from "High-Risk" URL c...
- Q106. An administrator has configured a Security policy where the matching condition includes a ...
- Q107. A Network Security Analyst is tasked with investigating a persistent 'High Severity' alert...
- Q108. What is the most likely reason a primary data center firewall is no longer visible in the ...
- Q109. A Palo Alto Networks Network Security Analyst is tasked with optimizing security posture b...
- Q110. Consider a scenario where a Palo Alto Networks firewall is configured with a Log Forwardin...
- Q111. Which feature enables an administrator to review the Security policy rule base for unused ...
- Q112. An administrator observes that an External Dynamic List (EDL) is not updating as expected....
- Q113. Based on the image provided, which two statements apply to the Security policy rules? (Cho...
- Q114. Which two features implement one-to-one translation of a source IP address while allowing ...
- Q115. Which policy set should be used to ensure that a policy is applied just before the default...
- Q116. A Security Operations Center (SOC) analyst is investigating a persistent outbound connecti...
- Q117. Which two Palo Alto Networks security management tools provide a consolidated creation of ...
- Q118. A Palo Alto Networks firewall, deployed as an internet edge device, experiences a sudden a...
- Q119. If using group mapping with Active Directory Universal Groups, what must you do when confi...
- Q120. Which three Ethernet interface types are configurable on the Palo Alto Networks firewall? ...
- Q121. Which type of security rule will match traffic between the Inside zone and Outside zone, w...
[×]
Download PDF File
Enter your email address to download PaloAltoNetworks.NetSec-Analyst.v2026-08-11.q121.pdf