Palo Alto Networks NetSec-Generalist Quiz 1 Topic 1 Questions 1-5

Question: 1

A firewall administrator wants to segment the network traffic and prevent noncritical assets from being able to access critical assets on the network.

Which action should the administrator take to ensure the critical assets are in a separate zone from the noncritical assets?

ACreate a deny Security policy with 'any' set for both the source and destination zones.

BCreate an allow Security policy with 'any' set for both the source and destination zones.

CLogically separate physical and virtual interfaces to control the traffic that passes across the interface.

DAssign a single interface to multiple security zones.

Show Answer

Question: 2

Which firewall attribute can an engineer use to simplify rule creation and automatically adapt to changes in server roles or security posture based on log events?

ADynamic Address Groups

BDynamic User Groups

CPredefined IP addresses

DAddress objects

Show Answer

Question: 3

An IT security administrator is maintaining connectivity and security between on-premises infrastructure, private cloud, and public cloud environments in Strata Cloud Manager (SCM).

Which set of practices must be implemented to effectively manage certificates and ensure secure communication across these segmented environments?

AUse a centralized certificate management solution. Regularly renew and update certificates. Employ strong encryption protocols.

BUse self-signed certificates for all environments.
Renew certificates manually once a year.
Avoid automating certificate management to maintain control.

CRely on the cloud provider's default certificates.
Avoid renewing certificates to reduce overhead and complexity. Manage certificate deployment manually.

DImplement different certificate authorities (CAs) for each environment. Use default certificate settings.
Renew certificates only when they expire to reduce overhead and complexity.

Show Answer

Question: 4

In which mode should an ION device be configured at a newly acquired site to allow site traffic to be audited without steering traffic?

AAccess

BControl

CDisabled

DAnalytics

Show Answer

Question: 5

What will collect device information when a user has authenticated and connected to a GlobalProtect gateway?

ARADIUS Authentication

BIP address

CHost information profile (HIP)

DSession ID

Show Answer

Palo Alto Networks NetSec-Generalist Quiz:1 Topic:1 Questions:1-5