NetSec-Pro Free Practice Test

Which feature of SaaS Security will allow a firewall administrator to identify unknown SaaS applications in an environment?

1. A. App-ID Cloud Engine
2. B. App-ID
3. C. SaaS Data Security
4. D. Cloud Identity Engine

Correct Answer: A

Which subscription sends non-file format-based traffic that matches Data Filtering Profile criteria to a cloud service to render a verdict?

1. A. Enterprise DLP
2. B. Advanced URL Filtering
3. C. SaaS Security Inline
4. D. Advanced WildFire

Correct Answer: A

A cloud security architect is designing a certificate management strategy for Strata Cloud Manager (SCM) across hybrid environments. Which practice ensures optimal security with low management overhead?

1. A. Deploy centralized certificate automation with standardized protocols and continuous monitoring.
2. B. Implement separate certificate authorities with independent validation rules for each cloud environment.
3. C. Configure manual certificate deployment with quarterly reviews and environment- specific security protocols.
4. D. Use cloud provider default certificates with scheduled synchronization and localized renewal processes.

Correct Answer: A

Which offering can be managed in both Panorama and Strata Cloud Manager (SCM)?

1. A. Autonomous Digital Experience Manager (ADEM)
2. B. VM-Series Next-Generation Firewall (NGFW)
3. C. Prisma SD-WAN
4. D. SaaS Security

Correct Answer: B

How does a firewall behave when SSL Inbound Inspection is enabled?

1. A. It acts transparently between the client and the internal server.
2. B. It decrypts inbound and outbound SSH connections.
3. C. It decrypts traffic between the client and the external server.
4. D. It acts as meddler-in-the-middle between the client and the internal server.

Correct Answer: D