6.5 Identify and Describe Troubleshooting Issues Related to Application Security Components (e.g., Proper Policy Configuration) CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An organization's security team notices that a new application, 'custom-app', is not being identified by the firewall, even though the application signature was updated last week. Traffic logs show the sessions are being classified as 'not-applicable'. Which step should you take to troubleshoot this issue?

   • AReboot the firewall to force a re-evaluation of the application signatures.
   • BVerify that the application signature update was successfully installed and the firewall is using the latest content version.
   • CCreate a custom application signature for 'custom-app'.
   • DChange the security policy to allow all traffic from the application's source IP.
   Reveal Solution Discussion Select an answer first
2. 12foundation · medium

   An administrator suspects that a security profile is not blocking a specific threat. Which log type would show whether the threat was detected and what action was taken?

   • ASystem logs
   • BThreat logs
   • CHIP match logs
   • DTraffic logs
   Reveal Solution Discussion Select an answer first
4. 13foundation · medium

   An administrator finds that a security policy rule with a vulnerability protection profile is not blocking a known exploit. What is a common resolution for this issue?

   • ADisable the vulnerability protection profile and use a custom application instead.
   • BChange the rule's action from 'allow' to 'deny'.
   • CMove the rule to the top of the policy rulebase.
   • DUpdate the content version to ensure the latest vulnerability signatures are installed.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company has a security rule that allows 'web-browsing' and applies a vulnerability protection profile. Users report that a known exploit is not being blocked. The traffic logs show the session is allowed and the vulnerability protection profile is listed in the rule. What is the most likely cause of this issue?

   • AThe application signature for the web application is outdated.
   • BThe firewall's threat prevention license has expired.
   • CThe security rule is not matching the traffic.
   • DThe vulnerability protection profile is set to 'alert' instead of 'block'.
   Reveal Solution Discussion Select an answer first
6. 15foundation · medium

   A firewall is not correctly identifying a new application version. What is the most likely reason for this issue?

   • AThe application is not defined in the custom application list.
   • BThe application signature database is outdated.
   • CThe security policy rule has the wrong action set.
   • DThe firewall's management interface is not configured with a default gateway.
   Reveal Solution Discussion Select an answer first