Free NetSec-Analyst Exam braindumps download (NetSec-Analyst exam dumps Free)

QUESTION: 126

Which two rule types allow the administrator to modify the destination zone? (Choose two )

interzone
intrazone
universal
shadowed

Answer(s): A,C

Show Answer Next Question

QUESTION: 127

Which statement is true about Panorama managed devices?

Panorama automatically removes local configuration locks after a commit from Panorama
Local configuration locks prohibit Security policy changes for a Panorama managed device
Security policy rules configured on local firewalls always take precedence
Local configuration locks can be manually unlocked from Panorama

Answer(s): D

Reference:

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/administer- panorama/manage- locks-forrestricting-configuration-changes.html

Show Answer Next Question

QUESTION: 128

What can be achieved by selecting a policy target prior to pushing policy rules from Panorama?

Doing so limits the templates that receive the policy rules
Doing so provides audit information prior to making changes for selected policy rules
You can specify the firewalls m a device group to which to push policy rules
You specify the location as pre can - or post-rules to push policy rules

Answer(s): C

Show Answer Next Question

QUESTION: 129

An administrator would like to see the traffic that matches the interzone-default rule in the traffic logs.

What is the correct process to enable this logging1?

Select the interzone-default rule and edit the rule on the Actions tab select Log at Session Start and click OK
Select the interzone-default rule and edit the rule on the Actions tab select Log at Session End and click OK
This rule has traffic logging enabled by default no further action is required
Select the interzone-default rule and click Override on the Actions tab select Log at Session End and click OK

Answer(s): D

Show Answer Next Question