Palo Alto Networks NetSec-Analyst 問題集

質問 1：
An analyst wants to create a custom application for an internal tool that uses a specific proprietary protocol.
Which information is required to ensure the firewall correctly identifies this application using App-ID?
A. The MAC address of the server.
B. Source and Destination IP addresses.
C. The URL category of the server.
D. Signature patterns found in the packet payload.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
To comply with new regulations, a company requires all traffic logs related to the "HR-App" application across all Security policies be sent to a compliance syslog server. A Log Forwarding profile already exists to send logs to a default syslog server.
What is the most efficient process for configuring an NGFW to comply with the new regulations without disrupting existing traffic logs being sent to the default syslog server?
A. Create a new Log Forwarding profile, update the profile with the details of the compliance syslog server and attach the profile to the relevant Security policy rule.
B. Create a Log Forwarding profile and enable the predefined filter for "Application" In the associated dropdown, select or create a new application object with the name "HR-App," and add the details for the compliance syslog server.
C. Edit the existing Log Forwarding profile, add a new entry, use the filter builder to match on application
"HR-App," and add the details for the compliance syslog server.
D. Edit the existing Log Forwarding profile by adding a new match list consisting of Log Forwarding filter for the application named "HR-App" to direct logs to the compliance syslog server.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
An analyst notices latency on the firewall and wants to improve performance. Which steps can be taken to reduce management plane CPU while working to determine the underlying problem?
A. Enable log forwarding from the firewall to an external destination.
B. Enable logging for intrazone-default and interzone-default security rules.
C. Disable log at session end and only log at session start.
D. Disable log at session start and only log at session end.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A company wants to ensure that any file uploaded to a specific cloud storage provider is immediately analyzed for malware, even if the file has never been seen before. Which action should be set in the WildFire Analysis Profile?
A. Forward
B. Continue
C. Alert
D. Block
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Which type of object should be used to ensure that a Security policy rule automatically updates when a new virtual machine is spun up in a public cloud environment and assigned a specific tag?
A. Static Address Group
B. Dynamic Address Group (DAG)
C. External Dynamic List (EDL)
D. Application Filter
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
What is the purpose of the "Config Audit" feature in Panorama?
A. To check if a firewall is running the latest software version.
B. To monitor the real-time CPU usage of the firewalls.
C. To compare the current running configuration with a previously saved version.
D. To automatically resolve IP address conflicts.
正解：C
解説: (Topexam メンバーにのみ表示されます)