Online Access Free NetSec-Analyst Practice Test

A financial company is deploying NGFWs with the Advanced SD-WAN subscription to improve uptime and bandwidth across thousands of ATMs. The company requires that traffic flows to the internal application needed by the ATMs always use the path with the lowest latency and packet loss.
Which unique SD-WAN rule parameters meet this criteria?

• A.Application/Service: "Internal Application for ATMs" # Path Selection "Weighted Distribution" in Traffic Distribution Profile.
• B.Application/Service: "Internal Application for ATMs" & "Management" in Path Quality Profile # Path Selection "Any."
• C.Application/Service: "Internal Application for ATMs" # Path Selection: "Best Available Path" in Traffic Distribution Profile.
• D.Application/Service: "Internal Application for ATMs" & "ATM Path(Custom)" in Path Quality Profile
  # Path Selection "Any."

When using Strata Cloud Manager (SCM), which tool allows an analyst to automatically migrate local firewall configurations to a centralized management folder?

• A.Strata Cloud Manager Transition
• B.Policy Optimizer
• C.Template Variable
• D.Config Audit

A company requires that all file transfers only over HTTP (tcp/80 and tcp/8080) to SaaS storage must be inspected for data exfiltration. Traffic to encrypted HTTPS SaaS storage cannot be inspected based on the company decryption restrictions.
When using a security profile group, which Security policy configuration meets this requirement?

• A.One with data filtering and an application filter that matches "file-sharing" applications, then set the service to tcp/80 and tcp/8080.
• B.One with data filtering and the service set to tcp/80 and tcp/8080, then verify block threshold is set to
  "1" to stop exfiltration.
• C.One with URL filtering and file blocking to block all file uploads to the URL category online-storage- and-backup, then set the service to tcp/80 and tcp/8080.
• D.One with data filtering to inspect all HTTP traffic on the web-browsing application using application- default for the service.

A security administrator is creating an address object for a partner organization whose public IP address is unknown but who always uses a specific domain name. Which address object type should be used?

• A.Multicast
• B.FQDN
• C.IP Range
• D.IP Netmask

An organization uses several different web-conferencing tools (Zoom, Microsoft Teams, WebEx). The analyst wants to create a single security rule to allow all these tools without listing each App-ID individually. What should the analyst create?

• A.Custom App-ID
• B.Service Group
• C.Application Group
• D.Application Filter