Palo Alto Networks Network Security Analyst : NetSec-Analyst

A security administrator wants to apply a Log Forwarding profile to all new security rules automatically.? What should the administrator name the Log Forwarding profile to ensure it is automatically assigned to new security rules??

• A. default
• B. auto-assign
• C. new-rule-profile?
• D. log-forward

An analyst is troubleshooting a policy that is not matching traffic as expected. After reviewing the logs, the analyst sees that the traffic is matching a rule with a lower priority. Which feature allows the analyst to compare two rules side-by-side to identify the conflict?

• A. Rule Comparison
• B. Policy Optimizer
• C. ACC (Application Command Center)
• D. Config Audit

A team of analysts uses four NGWFs with the Precision Al Bundle, SaaS Security Inline, and Strata Cloud Manager Pro Collectively this secures all company assets across the data center and two remote sites. A security incident requires the team to review a mobile user, John Doe.
During the audit, the team prompts, "How was the application experience for John Doe over the past 60 days?" What is an expected response from Strata Copilot?

• A. The user 'John Doe' encountered a total of 219 threats in the last 3 hours."
• B. "Your organization doesn't have ADEM."
• C. The top three threats impacting John Doe are phishing, SQL injections, and ransomware."
• D. "The average application test score for 'john doe' over the past 60 days is 37 67."

A user reports that a specific business application is dropping connection every few minutes. The analyst wants to see if the firewall's session table is reaching its limit for that specific user. Which tool should the analyst use?

• A. Session Browser
• B. Policy Optimizer
• C. ACC (Application Command Center)
• D. Rule Usage Filter

When configuring SSL Inbound Inspection for a public-facing web server, what must be installed as a critical certificate management step to ensure decryption of the SSL connection?

• A. Certificate generated by an internal CA server and session-specific certificates on the firewall.
• B. Public key wildcard certificate on the firewall to decrypt all inbound traffic.
• C. Self-signed certificate on the firewall to protect the identity of the server.
• D. Web server certificate and corresponding private key on the firewall.