6.5 Identify and Describe Troubleshooting Issues Related to Application Security Components (e.g., Proper Policy Configuration) CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company's security team is troubleshooting why a specific application is not being blocked by the firewall, even though the security policy has a rule that blocks it. The traffic logs show the application is being allowed by a different rule. Which troubleshooting step should be performed first?

   • AReview the security policy rule order to ensure the block rule is evaluated before any allow rules.
   • BVerify that the security profile is applied to the block rule.
   • CConfirm that the firewall's threat prevention license is active.
   • DCheck if the application signature is up to date.
   Reveal Solution Discussion Select an answer first
2. 2foundation · medium

   A user reports that they cannot access a specific website. The firewall's security policy has a rule that allows 'web-browsing' from the user's zone to the internet. What is a common troubleshooting issue related to application security components that could cause this?

   • AThe security policy rule is placed in the NAT rulebase.
   • BThe website's traffic is being identified as a different application that is not allowed by the rule.
   • CThe security profile attached to the rule is blocking the traffic.
   • DThe firewall's management interface is down.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An administrator is troubleshooting why a 'deny' rule for a specific application is not working. The traffic logs show the traffic is being allowed by a rule that permits 'any' application. What should the administrator do to ensure the deny rule takes effect?

   • AMove the deny rule above the allow rule in the policy.
   • BAdd the application to the allow rule's application list.
   • CChange the deny rule's action to 'drop'.
   • DDisable the allow rule temporarily.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company recently enabled a new application security policy that blocks 'social-networking' for the Marketing department. Users in Marketing report that they can still access Facebook. The firewall logs show the traffic is being allowed by an earlier rule that permits 'web-browsing'. Which action should you take to resolve the issue?

   • AMove the social-networking block rule above the web-browsing allow rule in the security policy.
   • BDisable the web-browsing allow rule entirely.
   • CAdd a 'deny' rule for Facebook's IP addresses in the same rule as the web-browsing allow.
   • DChange the block rule's action to 'drop' instead of 'deny'.
   Reveal Solution Discussion Select an answer first
6. 5foundation · medium

   When troubleshooting why a specific application is not being matched by a security policy rule, what should an administrator check first?

   • AThe firewall's routing table to ensure the traffic is being forwarded correctly.
   • BThe security policy rule's logging settings.
   • CThe firewall's high availability configuration.
   • DThe application signature version and whether the application is identified correctly.
   Reveal Solution Discussion Select an answer first