Question 1

Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiatemalicious code against a targeted machine.

Options :

A : Exploitation

B : Installation

C : Reconnaissance

D : Act on Objective

Answer: A

Question 2

The compliance officer requests that all evasive applications need to be blocked on all perimeterfirewalls out to the internet The firewall is configured with two zones;1. trust for internal networks2. untrust to the internetBased on the capabilities of the Palo Alto Networks NGFW, what are two ways to configure a security policy using App-ID to comply with this request? (Choose two )

Options :

A : Create a deny rule at the top of the policy from trust to untrust with service application-default and add an application filter with the evasive characteristic

B : Create a deny rule at the top of the policy from trust to untrust over any service and select evasive as the application

C : Create a deny rule at the top of the policy from trust to untrust with service application-default and select evasive as the application

D : Create a deny rule at the top of the policy from trust to untrust over any service and add an application filter with the evasive characteristic

Answer: A,D

Question 3

What is the default action for the SYN Flood option within the DoS Protection profile?

Options :

A : Alert

B : Random Early Drop

C : Reset-client

D : Sinkhole

Answer: B

Question 4

Which statement is true regarding a Best Practice Assessment?

Options :

A : The BPA tool can be run only on firewalls

B : It provides a percentage of adoption for each assessment data

C : The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus prevention activities

D : It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

Answer: C

Question 5

Which feature would be useful for preventing traffic from hosting providers that place fewrestrictions on content, whose services are frequently used by attackers to distribute illegal orunethical material?

Options :

A : Palo Alto Networks Bulletproof IP Addresses

B : Palo Alto Networks C&C IP Addresses

C : Palo Alto Networks Known Malicious IP Addresses

D : Palo Alto Networks High-Risk IP Addresses

Answer: A

Free NetSec-Analyst Mock Exam – Practice Online Confidently

Buying Options: