After creating a new security policy rule, what is the best way to verify that it is working as intended without disrupting legitimate traffic?

Use the Test Policy Match tool with sample traffic parameters

Check the rule's hit count after a week

Immediately move the rule to the top of the rulebase

Delete the rule and recreate it

In Palo Alto Networks, security policies are evaluated in which order?

Based on the most specific rule first

From bottom to top, last match wins

From top to bottom, first match wins

A company has a policy that allows all users to access the internet, but they want to block access to social media for users in the 'Marketing' group. User-ID is integrated with Active Directory. The administrator creates a rule that blocks social media for the 'Marketing' group and places it above the allow rule. However, some Marketing users can still access social media. What is the most likely reason?

The block rule uses the wrong application.

The block rule is not committed.

The allow rule is placed above the block rule.

The User-ID mapping for those users is not up to date.

Palo Alto NetworksCertified Network Security Analyst

Domain 2Objective 1

2.1 Create and Apply Security Policies (i.e., App-ID, User-ID, Content-ID) NETWORK-SECURITY-ANALYST Practice Questions (Page 2)

Part of the Policy Creation and Application domain, which accounts for 30% of the NETWORK-SECURITY-ANALYST exam.

14questions here

3free pages

6concepts

30%of the exam

Questions 6–10

6foundation · easy
After creating a new security policy rule, what is the best way to verify that it is working as intended without disrupting legitimate traffic?
Select an answer first
7foundation · easy
In Palo Alto Networks, security policies are evaluated in which order?
Select an answer first
8foundation · easy
A security administrator wants to block access to known malware-hosting websites and also prevent intrusion attempts. Which Palo Alto Networks technology provides these capabilities within a security policy?
Select an answer first
9foundation · easy
When creating a security policy rule, which of the following is a required match criterion that must be specified?
Select an answer first
10expert · hard
A company has a policy that allows all users to access the internet, but they want to block access to social media for users in the 'Marketing' group. User-ID is integrated with Active Directory. The administrator creates a rule that blocks social media for the 'Marketing' group and places it above the allow rule. However, some Marketing users can still access social media. What is the most likely reason?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ANALYST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ANALYST” is a trademark of its owner, used for identification only.

2.1 Create and Apply Security Policies (i.e., App-ID, User-ID, Content-ID) NETWORK-SECURITY-ANALYST Practice Questions (Page 2)

Questions 6–10

After creating a new security policy rule, what is the best way to verify that it is working as intended without disrupting legitimate traffic?

In Palo Alto Networks, security policies are evaluated in which order?

A security administrator wants to block access to known malware-hosting websites and also prevent intrusion attempts. Which Palo Alto Networks technology provides these capabilities within a security policy?

When creating a security policy rule, which of the following is a required match criterion that must be specified?

Keep studying — Policy Creation and Application