NetSec Analyst 270-409 Practice Questions & Answers • ExamPrepare

55 questions in this view

Page 1 of 10

Question 1

What is the Palo Alto Networks recommended Vulnerability Protection profile action for critical and high severity vulnerabilities?

reset-server
default
alert
reset-both

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

A security analyst notices that one of the perimeter firewalls has disappeared from the Strata Cloud Manager (SCM) Health dashboard. Upon checking the device locally, the analyst confirms the firewall is operational and the device certificate is valid.

What would cause the device to go missing?

The firewall has reached its maximum session capacity.
The firewall is running a version of PAN-OS that is too new for SCM.
The administrator password was recently changed on the local firewall.
The device-level telemetry settings are disabled or misconfigured.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

A retail organization is implementing SD-WAN across its branch offices to ensure high availability (HA) for a mission-critical Point of Sale (POS) application. The administrator needs to configure a policy that automatically selects the path with the best real-time performance metrics for the application traffic.

Which rule configuration ensures that Application: POS-App always uses the optimal path based on link quality?

Path Selection: Top Priority
Traffic Distribution Profile: Weighted Distribution
Path Selection: Any (with Path Quality Profile)
Traffic Distribution Profile: Best Available Path

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

What is a benefit of using Strata Cloud Manager (SCM) snippets in Security policy deployment?

They allow reusable policy components that can be applied to multiple firewalls and folders.
They automatically adjust firewall configurations based on traffic patterns.
They enable real-time firewall monitoring for network anomalies.
They eliminate the need for any manual configuration to Security policies.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

An organization's network security department is making playbooks and scripts on how to find the most critical issues to address first. A network security analyst is given the following instructions:

"For Palo Alto Networks NGFW devices, create a step-by-step path to bring up a screen with the real-time most critical open operational health issues for all devices. This guide should be made with the least amount of human interaction as possible."

How should the analyst build the guide to meet specifications for Strata Cloud Manager (SCM)?

In Monitor → NGFW Devices → Health, open each device type in a new tab, find the "Top 5 Critical Alerts" widget for each tab.
In Command Center → Operational Health, click on the number for NGFW in the "Open Health Incidents by Severity" widget.
In Reports → Reports, run the custom report "Company NGFW Operational Health."
In Dashboards → Device Health, click the number next to "Critical" in the "Device Health" widget.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

An administrator is attempting to push a new security policy from Panorama to a managed firewall. The push operation fails with a message indicating that the firewall has uncommitted local changes. The administrator wants the Panorama push to proceed by ignoring the local candidate configuration and merging only with the running configuration.

Which option should the administrator deselect in the "Panorama Push to Devices" dialog?

Include Device and Network Templates
Merge with Device Candidate Config
Force Template Values
Include Firewall Clusters

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.