Online Access Free NetSec-Pro Exam Questions

Which GlobalProtect configuration is recommended for granular security enforcement of remote user device posture?

• A.Configuring host information profile (HIP) checks for all mobile users
• B.Configuring a rule that blocks the ability of users to disable GlobalProtect while accessing internal applications
• C.Applying log at session end to all GlobalProtect Security policies
• D.Implementing multi-factor authentication (MFA) for all users attempting to access internal applications

In which order is Prisma SD-WAN dynamic path selection performed?

• A.1. Determine potential paths based on policy.
  2. Determine link quality.
  3. Measure application performance.
  4. Measure link capacity.
• B.1. Determine link quality.
  2. Measure link capacity.
  3. Measure application performance.
  4. Determine potential paths based on policy.
• C.1. Determine potential paths based on policy.
  2. Measure application performance.
  3. Determine link quality.
  4. Measure link capacity.
• D.1. Measure link capacity.
  2. Measure application performance.
  3. Determine link quality.
  4. Determine potential paths based on policy.

Which two SSH Proxy decryption profile settings should be configured to enhance the company's security posture? (Choose two.)

• A.Block sessions when certificate validation fails.
• B.Block connections that use non-compliant SSH versions.
• C.Allow sessions with legacy SSH protocol versions.
• D.Allow sessions when decryption resources are unavailable.

Which profile can help prevent the transmission of sensitive information to internet applications?

• A.Data Filtering
• B.Antivirus
• C.Anti-spyware
• D.URL Filtering

Which tool allows a Prisma Access administrator to gather Active Directory groups to be used in user-to-group mappings?

• A.SAML-based integration
• B.Cloud Identity Engine
• C.SCIM-based integration
• D.Active Directory server profile