Free NetSec-Analyst Exam Braindumps
Palo Alto Networks Network Security Analyst Questions 141–145 (page: 30)

Updated On: 10-Feb-2026

How are Application Fillers or Application Groups used in firewall policy?

  1. An Application Filter is a static way of grouping applications and can be configured as a nested member of an Application Group
  2. An Application Filter is a dynamic way to group applications and can be configured as a nested member of an Application Group
  3. An Application Group is a dynamic way of grouping applications and can be configured as a nested member of an Application Group
  4. An Application Group is a static way of grouping applications and cannot be configured as a nested member of Application Group

Answer(s): B



An administrator wishes to follow best practices for logging traffic that traverses the firewall

Which log setting is correct?

  1. Disable all logging
  2. Enable Log at Session End
  3. Enable Log at Session Start
  4. Enable Log at both Session Start and End

Answer(s): B


Reference:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clt5CAC



Assume that traffic matches a Security policy rule but the attached Security Profiles is configured to block matching traffic

Which statement accurately describes how the firewall will apply an action to matching traffic?

  1. If it is an allowed rule, then the Security Profile action is applied last
  2. If it is a block rule then the Security policy rule action is applied last
  3. If it is an allow rule then the Security policy rule is applied last
  4. If it is a block rule then Security Profile action is applied last

Answer(s): A



You have been tasked to configure access to a new web server located in the DMZ

Based on the diagram what configuration changes are required in the NGFW virtual router to route traffic from the 10 1 1 0/24 network to 192 168 1 0/24?

  1. Add a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 192.168 1.10
  2. Add a route with the destination of 192 168 1 0/24 using interface Eth 1/2 with a next-hop of 172.16.1.2
  3. Add a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 172.16.1.2
  4. Add a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 192.168.1.254

Answer(s): C



An administrator wants to prevent access to media content websites that are risky

Which two URL categories should be combined in a custom URL category to accomplish this goal? (Choose two)

  1. streaming-media
  2. high-risk
  3. recreation-and-hobbies
  4. known-risk

Answer(s): A,C



Viewing page 30 of 76
Viewing questions 146 - 150 out of 372 questions


Post your Comments and Discuss Palo Alto Networks NetSec-Analyst exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!