NetSec-Analyst問題集、Palo Alto Networks実際の試験問題

質問 1

A security administrator needs to block access to a specific list of 500 malicious domains. These domains are updated daily by a third-party intelligence feed. What is the most efficient way to manage these domains as an object?

A. Add the domains to the "Block List" of a URL Filtering profile.

B. Create a Domain-based FQDN Address Group.

C. Create an External Dynamic List (EDL) of type "Domain."

D. Create a Custom URL Category and manually paste the domains daily.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 2

Which feature of Strata Cloud Manager provides AI-powered recommendations to strengthen security posture?

A. Strata Copilot

B. Policy Optimizer

C. Activity Insights

D. Command Center

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 3

An analyst is configuring an Anti-Spyware profile to identify infected internal hosts that are attempting to contact known malicious Command and Control (C2) servers. Which feature should be enabled to redirect these malicious DNS queries to a controlled internal IP address for forensic analysis?

A. Domain Generation Algorithm (DGA) Protection

B. DNS Sinkhole

C. DNS Proxy

D. DNS Security

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 4

A security manager asks for automated guidance on several OS security advisories released by Palo Alto Networks. Which steps can be taken on Strata Cloud Manager (SCM) to respond to the request?

A. Dashboard → Security Posture Insights, set time range to past 90 days, look at regressing scores in particular, generate a weekly report.

B. Dashboard → PAN-OS CVEs, select the CVEs to review, generate upgrade recommendations.

C. Insights → Application Experience → Application Domains, add a filter for usage source, generate a weekly report.

D. Insights → Activity Insights → Threats, add a filter for threat category, review the logs, generate a weekly report.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 5

A firewall analyst must enforce HIP checks using previously created HIP profiles. Where in the relevant Security policy rule does the analyst add the HIP profile for remote users?

A. Source address

B. Actions

C. Source device

D. Source user

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 6

A company wants to ensure that its internal web server is only accessible from the internet on port 443, but the server is actually listening on port 8443. Which NAT configuration should be used?

A. Destination NAT with Port Translation.

B. Source NAT with Static IP translation.

C. Bi-directional NAT with Dynamic IP and Port.

D. Hide NAT with Overload.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 7

Following a configuration change, the management interface of a PA-Series NGFW becomes unreachable, and no data plane interface is configured with a management profile. Which troubleshooting step will help identify recent changes?

A. Access the device via the serial console and use the CLI command show config diff to compare the running configuration with a saved backup.

B. Export a named configuration snapshot and compare it manually using a text editor from the remote management portal.

C. Log into an alternate management port and review the commit history via the PAN-OS GUI to pinpoint changes affecting the management interface.

D. Access the device via the serial console and use the CLI command show config audit info to identify recent configuration changes.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 8

In a Zero Trust environment, why is it recommended to use "User-ID" instead of just IP addresses in Security policy rules?

A. To allow the firewall to perform hardware-level decryption.

B. User-ID is required to enable the "application-default" service setting.

C. Using User-ID reduces the CPU load on the Management Plane.

D. IP addresses are dynamic and do not provide persistent identity in modern networks.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 9

When configuring a Data Filtering profile, which of the following actions can be specified upon detecting a match? (Select all that apply)?

A. Continue

B. Allow

C. Block

D. Alert

正解: B,C,D

解説: (PassTest メンバーにのみ表示されます)

質問 10

Which object type allows an analyst to group multiple IP addresses based on their geographical location (country) to simplify "Geo-blocking" policies?

A. Static Address Object

B. Regions

C. FQDN Address Object

D. Dynamic Address Group (DAG)

正解: B

解説: (PassTest メンバーにのみ表示されます)

Palo Alto Networks Network Security Analyst - NetSec-Analyst 模擬練習