When is the content inspection performed in the packet flow process?
Answer(s): A
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVHCA0
During the App-ID update process, what should you click on to confirm whether an existing policy rule is affected by an App-ID update?
Answer(s): B
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/manage-new-app- ids-introduced-in-content-releases/review-new-app-id-impact-on-existing-policy-rules
When creating a custom URL category object, which is a valid type?
Answer(s): D
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-web-interface- help/objects/objects-custom-objects-url-category.html
When HTTPS for management and GlobalProtect are enabled on the same interface, which TCP port is used for management access?
Answer(s): C
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm8SCAS#:~:text=Details,using%20https%20on%20port%204443
What two authentication methods on the Palo Alto Networks firewalls support authentication and authorization for role-based access control? (Choose two.)
Answer(s): A,B
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/firewall- administration/manage-firewall-administrators/administrative-authentication.htmlThe administrative accounts are defined on an external SAML, TACACS+, or RADIUS server. The server performs both authentication and authorization. For authorization, you define Vendor-Specific Attributes (VSAs) on the TACACS+ or RADIUS server, or SAML attributes on the SAML server. PAN-OS maps the attributes to administrator roles, access domains, user groups, and virtual systems that you define on the firewall.
Post your Comments and Discuss Palo Alto Networks NetSec-Analyst exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the NetSec-Analyst content, but please register or login to continue.