1.3 Create and Apply External Dynamic Lists NETWORK-SECURITY-ANALYST Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   When creating an External Dynamic List object in the Palo Alto Networks firewall, which of the following must be specified?

   • AThe authentication certificate and private key
   • BThe source URL and the list type
   • CThe log forwarding profile and severity
   • DThe destination port and protocol
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   An organization uses an External Dynamic List hosted on a server that requires client certificate authentication. The analyst needs to configure the EDL so the firewall can authenticate to the server. However, the firewall's management interface does not have the certificate installed. What is the correct approach?

   • ACreate a new EDL with a different source URL that does not require authentication.
   • BInstall the client certificate on the firewall's management interface, then configure the EDL to use it for authentication.
   • CConfigure the EDL with a username and password instead of a certificate.
   • DUse an HTTP URL instead of HTTPS to bypass certificate authentication.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a valid external source for an External Dynamic List?

   • AA WildFire submission report
   • BA PAN-DB category feed
   • CA local file on the firewall's hard drive
   • DA URL that hosts a plain-text list of entries
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of an External Dynamic List (EDL) in a Palo Alto Networks firewall?

   • ATo dynamically update security policy match criteria with external threat intelligence
   • BTo provide a static list of IP addresses that must be manually updated by an administrator
   • CTo allow the firewall to automatically update its threat prevention signatures
   • DTo replace the need for security policy rules by blocking all traffic from unknown sources
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What action can a security policy rule take when traffic matches an External Dynamic List entry?

   • ARedirect the traffic to a proxy
   • BQuarantine the source IP
   • CLog the traffic but take no action
   • DAllow or deny the traffic
   Reveal Solution Discussion Select an answer first