Free NetSec-Analyst Exam Braindumps
Palo Alto Networks Network Security Analyst Questions 111–115 (page: 24)

Updated On: 10-Feb-2026

Which two features can be used to tag a user name so that it is included in a dynamic user group? (Choose two)

  1. XML API
  2. log forwarding auto-tagging
  3. GlobalProtect agent
  4. User-ID Windows-based agent

Answer(s): A,D

Explanation:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/url-filtering-concepts/url- filtering-profile-actions



Based on the security policy rules shown, ssh will be allowed on which port?

  1. any port
  2. same port as ssl and snmpv3
  3. the default port
  4. only ephemeral ports

Answer(s): C



Which action results in the firewall blocking network traffic with out notifying the sender?

  1. Drop
  2. Deny
  3. Reset Server
  4. Reset Client

Answer(s): B



All users from the internal zone must be allowed only Telnet access to a server in the DMZ zone. Complete the two empty fields in the Security Policy rules that permits only this type of access.



Choose two.

  1. Service = "any"
  2. Application = "Telnet"
  3. Service - "application-default"
  4. Application = "any"

Answer(s): B,C



Which type of administrative role must you assign to a firewall administrator account, if the account must include a custom set of firewall permissions?

  1. SAML
  2. Multi-Factor Authentication
  3. Role-based
  4. Dynamic

Answer(s): C


Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/firewall- administration/manage-firewall-administrators/administrative-role-types.html



Viewing page 24 of 76
Viewing questions 116 - 120 out of 372 questions


Post your Comments and Discuss Palo Alto Networks NetSec-Analyst exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!