Online Access Free NetSec-Analyst Exam Questions

A company wants to ensure that its internal web server is only accessible from the internet on port 443, but the server is actually listening on port 8443. Which NAT configuration should be used?

• A.Destination NAT with Port Translation.
• B.Hide NAT with Overload.
• C.Bi-directional NAT with Dynamic IP and Port.
• D.Source NAT with Static IP translation.

An organization needs to implement a security rule that allows users to access "Facebook" but prevents them from using "Facebook-Chat." What is the best way to achieve this?

• A.Create a URL Filtering profile to block the chat URL.
• B.Use an Application Override rule for Facebook traffic.
• C.Create a security rule allowing the "Facebook-base" App-ID and another rule blocking the "Facebook- chat" App-ID.
• D.Block the specific IP addresses used by Facebook Chat.

When pushing a configuration from Panorama to multiple firewalls, an analyst wants to ensure that a specific local interface setting on one firewall is not overwritten by the template value. Which feature should be used?

• A.Policy Optimizer
• B.Template Variable
• C.Device Group Override
• D.Template Stack

A firewall administrator is creating an application override rule to bypass Layer 7 inspection for a pre-defined application. What is the expected behavior for Content-ID checks for this application?

• A.Threat inspection will occur if the pre-defined application supports threat inspection.
• B.WildFire will only use inline-ML checks instead of sending items to WildFire Cloud.
• C.No additional security checks will occur due to there being only Layer 4 handling.
• D.DNS Security will have degraded performance for advanced features.

When performing a "Push to Devices" from Panorama, an analyst wants to ensure that the push only affects a specific firewall in a shared Device Group. Which option in the push window allows this granular selection?

• A.Force Template Values
• B.Include Device and Network Templates
• C.Edit Selections
• D.Merge with Device Candidate Config