NetSec-Pro Free Practice Test

During a security incident investigation, which Security profile will have logs of attempted confidential data exfiltration?

1. A. File Blocking Profile
2. B. Enterprise DLP Profile
3. C. Vulnerability Protection Profile
4. D. WildFire Analysis Profile

Correct Answer: B

A network security engineer needs to implement segmentation but is under strict compliance requirements to place security enforcement as close as possible to the private applications hosted in Azure. Which deployment style is valid and meets the requirements in this scenario?

1. A. On a VM-Series NGFW, configure several Layer 2 zones with Layer 2 interfaces assigned to logically segment the network.
2. B. On a PA-Series NGFW, configure several Layer 2 zones with Layer 2 interfaces assigned to logically segment the network.
3. C. On a VM-Series NGFW, configure several Layer 3 zones with Layer 3 interfaces assigned to logically segment the network.
4. D. On a PA-Series NGFW, configure several Layer 3 zones with Layer 3 interfaces assigned to logically segment the network.

Correct Answer: C

Which two configurations are required when creating deployment profiles to migrate a perpetual VM-Series firewall to a flexible VM? (Choose two.)

1. A. Choose ??Fixed vCPU Models?? for configuration type.
2. B. Allocate the same number of vCPUs as the perpetual VM.
3. C. Allow only the same security services as the perpetual VM.
4. D. Deploy virtual Panorama for management.

Correct Answer: BC

What must be configured to successfully onboard a Prisma Access remote network using Strata Cloud Manager (SCM)?

1. A. Cloud Identity Engine
2. B. Autonomous Digital Experience Manager (ADEM)
3. C. GlobalProtect agent
4. D. IPSec termination node

Correct Answer: D

Which action allows an engineer to collectively update VM-Series firewalls with Strata Cloud Manager (SCM)?

1. A. Creating an update grouping rule
2. B. Scheduling software update
3. C. Creating a device grouping rule
4. D. Setting a target OS version

Correct Answer: C