Free NetSec-Analyst Exam Braindumps
Palo Alto Networks Network Security Analyst Questions 121–125 (page: 26)

Updated On: 10-Feb-2026

Which Security profile can you apply to protect against malware such as worms and Trojans?

  1. data filtering
  2. antivirus
  3. vulnerability protection
  4. anti-spyware

Answer(s): B


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security- profiles#:~:text=Antivirus%

20profiles%20protect%20against%20viruses,as

%20well%20as%20spyware%20downloads



Which two settings allow you to restrict access to the management interface? (Choose two )

  1. enabling the Content-ID filter
  2. administrative management services
  3. restricting HTTP and telnet using App-ID
  4. permitted IP addresses

Answer(s): A,C



Which object would an administrator create to block access to all high-risk applications?

  1. HIP profile
  2. application filter
  3. application group
  4. Vulnerability Protection profile

Answer(s): B


Reference:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClKECA0



An administrator would like to override the default deny action for a given application and instead would like to block the traffic and send the ICMP code "communication with the destination is administratively prohibited"

Which security policy action causes this?

  1. Drop
  2. Drop, send ICMP Unreachable
  3. Reset both
  4. Reset server

Answer(s): B



What is a prerequisite before enabling an administrative account which relies on a local firewall user database?

  1. Configure an authentication policy
  2. Configure an authentication sequence
  3. Configure an authentication profile
  4. Isolate the management interface on a dedicated management VLAN

Answer(s): C



Viewing page 26 of 76
Viewing questions 126 - 130 out of 372 questions


Post your Comments and Discuss Palo Alto Networks NetSec-Analyst exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!