Online Access Free NetSec-Pro Exam Questions

An organization is deploying Cloud NGFW on AWS and has chosen a centralized model to inspect traffic between multiple VPCs and the internet.
Which statement describes the deployment of Cloud NGFW instances in this model?

• A.Cloud NGFW instances are configured as a virtual hub within an AWS vWAN.
• B.Cloud NGFW instances are placed inline with the AWS internet security gateway, automatically inspecting all traffic.
• C.Each spoke VPC is deployed with a Cloud NGFW instance and then managed by a centralized AWS account.
• D.A security VPC is created to host Cloud NGFW endpoints, and an AWS Transit Gateway routes VPC traffic.

Which two components of a Security policy, when configured, allow third-party contractors access to internal applications outside business hours? (Choose two.)

• A.User-ID
• B.App-ID
• C.Service
• D.Schedule

Which functionality does an NGFW use to determine whether new session setups are legitimate or illegitimate?

• A.SYN flood protection
• B.Random Early Detection (RED)
• C.SYN bit
• D.SYN cookies

Which combination of techniques does App-ID use to control a specific application, regardless of the port it uses?

• A.Threat intelligence feeds and the WildFire signature database
• B.User-ID agent host information profiles (HIPs), and group mappings
• C.SSL/TLS handshake analysis and certificate metadata
• D.Heuristics application signatures, and application protocol decoding

Which two configurations are required when creating deployment profiles to migrate a perpetual VM-Series firewall to a flexible VM? (Choose two.)

• A.Allow only the same security services as the perpetual VM.
• B.Allocate the same number of vCPUs as the perpetual VM.
• C.Deploy virtual Panorama for management.
• D.Choose "Fixed vCPU Models" for configuration type.