Question 1

When creating a Panorama administrator type of Device Group and Template Admin, which twothings must you create first? (Choose two.)

Options :

A : password profile

B : access domain

C : admin rote

D : server profile

Answer: C,D

Question 2

A systems administrator momentarily loses track of which is the test environment firewall and whichis the production firewall. The administrator makes changes to the candidate configuration of theproduction firewall, but does not commit the changes. In addition, the configuration was not savedprior tomaking the changes.Which action will allow the administrator to undo the changes?

Options :

A : Load configuration version, and choose the first item on the list.

B : Load named configuration snapshot, and choose the first item on the list.

C : Revert to last saved configuration.

D : Revert to running configuration.

Answer: D

Question 3

What are three valid information sources that can be used when tagging users to dynamic usergroups? (Choose three.)

Options :

A : Blometric scanning results from iOS devices

B : Firewall logs

C : Custom API scripts

D : Security Information and Event Management Systems (SIEMS), such as Splun

E : DNS Security service

Answer: B,C,E

Question 4

What can be achieved by disabling the Share Unused Address and Service Objects with Devicessetting on Panorama?

Options :

A : Increase the backup capacity for configuration backups per firewall

B : Increase the per-firewall capacity for address and service objects

C : Reduce the configuration and session synchronization time between HA pairs

D : Reduce the number of objects pushed to a firewall

Answer: D

Question 5

An internal host wants to connect to servers of the internet through using source NAT.Which policy is required to enable source NAT on the firewall?

Options :

A : NAT policy with source zone and destination zone specified

B : post-NAT policy with external source and any destination address

C : NAT policy with no source of destination zone selected

D : pre-NAT policy with external source and any destination address

Answer: A

Free NetSec-Analyst Mock Exam – Practice Online Confidently

Buying Options: