Free NetSec-Analyst Exam Braindumps
Palo Alto Networks Network Security Analyst Questions 106–110 (page: 23)

Updated On: 10-Feb-2026

You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?

  1. Admin Role profile
  2. virtual router
  3. DNS proxy
  4. service route

Answer(s): A



Which license must an administrator acquire prior to downloading Antivirus updates for use with the firewall?

  1. URL filtering
  2. Antivirus
  3. WildFire
  4. Threat Prevention

Answer(s): D



Which definition describes the guiding principle of the zero-trust architecture?

  1. never trust, never connect
  2. always connect and verify
  3. never trust, always verify
  4. trust, but verity

Answer(s): C


Reference:

https://www.paloaltonetworks.com/cyberpedia/what-is-a-zero-trust-architecture



Four configuration choices are listed, and each could be used to block access to a specific URL. If you configured each choices to block the sameURL then which choice would be the last to block access to the URL?

  1. EDL in URL Filtering Profile.
  2. Custom URL category in Security Policy rule.
  3. Custom URL category in URL Filtering Profile.
  4. PAN-DB URL category in URL Filtering Profile.

Answer(s): D

Explanation:

The precedence is from the top down; First Match Wins: 1) Block list: Manually entered blocked URLs Objects - 2) Allow list: Manually entered allowed URLs Objects - 3) Custom URL Categories - 4) Cached Cached: URLs learned from External Dynamic Lists (EDLs) - 5) Pre-Defined Categories: PAN- DB or Brightcloud categories.



The CFO found a malware infected USB drive in the parking lot, which when inserted infected their corporate laptop the malware contacted a known command-and-control server which exfiltrating corporate data.

Which Security profile feature could have been used to prevent the communications with the command-and-control server?

  1. Create a Data Filtering Profile and enable its DNS sinkhole feature.
  2. Create an Antivirus Profile and enable its DNS sinkhole feature.
  3. Create an Anti-Spyware Profile and enable its DNS sinkhole feature.
  4. Create a URL Filtering Profile and block the DNS sinkhole URL category.

Answer(s): C



Viewing page 23 of 76
Viewing questions 111 - 115 out of 372 questions


Post your Comments and Discuss Palo Alto Networks NetSec-Analyst exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!