Palo Alto Networks PAN-NSP Online Practice Questions and Exam Preparation

Palo Alto Networks PAN-NSP Online Questions & Answers

• Question 1:

  In a Prisma SD-WAN environment experiencing voice quality degradation, which initial action is recommended?

  A. Immediately modify path quality thresholds.
  B. Review real-time analytics of path performance.
  C. Switch all VoIP traffic to backup paths.
  D. Request an RMA of the ION devices.
  B. Review real-time analytics of path performance.

• Question 2:

  Which feature allows inspection and control of file transfers based on file type?

  A. Antivirus profile
  B. File Blocking profile
  C. Vulnerability Protection profile
  D. URL Filtering profile
  B. File Blocking profile

• Question 3:

  When configuring HA between two firewalls, which interface is primarily used to exchange HA control information?

  A. Management interface
  B. HA1 interface
  C. HA2 interface
  D. Data interface
  B. HA1 interface

• Question 4:

  Which two components of a Security policy, when configured, allow third-party contractors access to internal applications outside business hours? (Choose two.)

  A. App-ID
  B. Service
  C. User-ID
  D. Schedule
  C. User-ID
  D. Schedule

• Question 5:

  Which feature helps reduce attack surface by limiting traffic to only required applications?

  A. Application-default service
  B. Decryption profile
  C. Zone protection profile
  D. Log forwarding profile
  A. Application-default service

• Question 6:

  A network administrator obtains Palo Alto Networks Advanced Threat Prevention and Advanced DNS Security subscriptions for edge NGFWs and is setting up security profiles.

  Which step should be included in the initial configuration of the Advanced DNS Security service?

  A. Create a decryption policy rule to decrypt DNS-over-TLS / port 853 traffic.
  B. Create overrides for all company owned FQDNs.
  C. Configure DNS Security signature policy settings to sinkhole malicious DNS queries.
  D. Enable Advanced Threat Prevention with default settings and only focus on high-risk traffic.
  C. Configure DNS Security signature policy settings to sinkhole malicious DNS queries.

• Question 7:

  Which log type provides visibility into allowed and denied sessions traversing the firewall?

  A. Threat logs
  B. Traffic logs
  C. Configuration logs
  D. System logs
  B. Traffic logs

• Question 8:

  An NGFW administrator is updating PAN-OS on company data center firewalls managed by Panorama.

  Prior to installing the update, what must the administrator verify to ensure the devices will continue to be supported by Panorama?

  A. Device telemetry is enabled.
  B. Panorama is configured as the primary device in the log collecting group for the data center firewalls.
  C. All devices are in the same template stack.
  D. Panorama is running the same or newer PAN-OS release as the one being installed.
  D. Panorama is running the same or newer PAN-OS release as the one being installed.

• Question 9:

  How can a firewall administrator block a list of 300 unique URLs in the most time-efficient manner?

  A. Use application filters to block the App-IDs.
  B. Use application groups to block the App-IDs.
  C. Import the list into a custom URL category.
  D. Block multiple predefined URL categories.
  C. Import the list into a custom URL category.

• Question 10:

  After a firewall is associated with Strata Cloud Manager (SCM), which two additional actions are required to enable management of the firewall from SCM? (Choose two.)

  A. Deploy a service connection for each branch site and connect with SCM.
  B. Configure NTP and DNS servers for the firewall.
  C. Configure a Security policy allowing "stratacloudmanager.paloaltonetworks.com" for all users.
  D. Install a device certificate.
  B. Configure NTP and DNS servers for the firewall.
  D. Install a device certificate.