Palo Alto Networks NetSec-Pro Exam Questions & Answers

Question 6 of 13

Which file type does Advanced WildFire support for inline analysis to detect advanced malware?

A.

PE

B.

APK

C.

PDF

D.

JAR

Question 7 of 13

How does a firewall behave when SSL Inbound Inspection is enabled?

A.

It decrypts inbound and outbound SSH connections.

B.

It acts as meddler-in-the-middle between the client and the internal server.

C.

It acts transparently between the client and the internal server.

D.

It decrypts traffic between the client and the external server.

Question 8 of 13

Which two content updates can be pushed to NGFWs from Panorama? (Choose two.)

A.

WildFire

B.

Applications and threats

C.

Advanced URL Filtering

D.

GlobalProtect data file

Question 9 of 13

Which step is necessary to ensure an organization is using the inline cloud analysis features in its Advanced Threat Prevention subscription?

A.

Update or create a new Anti-spyware security profile and enable the appropriate local deep learning models.

B.

Enable SSL decryption in Security policies to inspect and analyze encrypted traffic for threats.

C.

Disable anti-spyware to avoid performance impacts and rely solely on external threat intelligence.

D.

Configure Advanced Threat Prevention profiles with default settings and only focus on high-risk traffic to avoid affecting network performance.

Question 10 of 13

How do Cloud NGFW instances get created when using AWS centralized deployments?

A.

A security VPC will be created as transit gateways to push all traffic through the area.

B.

They are placed in a vWAN with a virtual hub.

C.

Selected VPCs will have Cloud NGFW workloads added to them.

D.

They replace the internet gateway service.