Free NetSec-Analyst Exam Braindumps
Palo Alto Networks Network Security Analyst Questions 176–180 (page: 37)

Updated On: 10-Feb-2026

Which Security policy match condition would an administrator use to block traffic from IP addresses on the Palo Alto Networks EDL of Known Malicious IP Addresses list?

  1. destination address
  2. source address
  3. destination zone
  4. source zone

Answer(s): B


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/use-an-external- dynamic-list-in-policy/external-dynamic-list.html



URL categories can be used as match criteria on which two policy types? (Choose two.)

  1. authentication
  2. decryptionC application override
  3. NAT

Answer(s): A,B


Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/url-filtering- concepts/url-category-as-policy-match-criteria.html



Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

  1. The web session was unsuccessfully decrypted.
  2. The traffic was denied by security profile.
  3. The traffic was denied by URL filtering.
  4. The web session was decrypted.

Answer(s): D



Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.



Which two Security policy rules will accomplish this configuration? (Choose two.)

  1. Untrust (Any) to DMZ (1.1.1.100), ssh - Allow
  2. Untrust (Any) to Untrust (10.1.1.1), web-browsing -Allow
  3. Untrust (Any) to Untrust (10.1.1.1), ssh -Allow
  4. Untrust (Any)to DMZ (10.1.1.100. 10.1.1.101), ssh, web-browsing-Allow
  5. Untrust (Any) to DMZ (1.1.1.100), web-browsing - Allow

Answer(s): A,E



Starting with PAN-OS version 9.1, application dependency information is now reported in which two locations? (Choose two.)

  1. on the App Dependency tab in the Commit Status window
  2. on the Policy Optimizer's Rule Usage pageC on the Application tab in the Security Policy Rule creation window
  3. on the Objects > Applications browser pages

Answer(s): A,C


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/app-id/use-application- objects-in-policy/resolve-application-dependencies.html



Viewing page 37 of 76
Viewing questions 181 - 185 out of 372 questions


Post your Comments and Discuss Palo Alto Networks NetSec-Analyst exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!