Question 1

Which type of profile must be applied to the Security policy rule to protect against buffer overflowsillegal code execution and other attempts to exploit system flaws?

Options :

A : anti-spyware

B : URL filtering

C : vulnerability protection

D : file blocking

Answer: C

Question 2

Which security profile should be used to classify malicious web content?

Options :

A : URL Filtering

B : Antivirus

C : Web Content

D : Vulnerability Protection

Answer: A

Question 3

Which feature would be useful for preventing traffic from hosting providers that place fewrestrictions on content, whose services are frequently used by attackers to distribute illegal orunethical material?

Options :

A : Palo Alto Networks Bulletproof IP Addresses

B : Palo Alto Networks C&C IP Addresses

C : Palo Alto Networks Known Malicious IP Addresses

D : Palo Alto Networks High-Risk IP Addresses

Answer: A

Question 4

What is the default action for the SYN Flood option within the DoS Protection profile?

Options :

A : Alert

B : Random Early Drop

C : Reset-client

D : Sinkhole

Answer: B

Question 5

Assume that traffic matches a Security policy rule but the attached Security Profiles is configured toblock matching trafficWhich statement accurately describes how the firewall will apply an action to matching traffic?

Options :

A : If it is an allowed rule, then the Security Profile action is applied last

B : If it is a block rule then the Security policy rule action is applied last

C : If it is an allow rule then the Security policy rule is applied last

D : If it is a block rule then Security Profile action is applied last

Answer: A

Free NetSec-Analyst Mock Exam – Practice Online Confidently

Buying Options: