1.1 Create and Apply Security Profiles and Security Profile Groups NETWORK-SECURITY-ANALYST Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   An organization has two security policy rules: one allows internal users to access the internet, and the other allows partners to access a specific web application. The security team wants to enforce antivirus and anti-spyware on both rules, but URL filtering should only be enforced on the internal users rule. What is the most efficient configuration?

   • ACreate one security profile group with all three profiles and apply it to both rules.
   • BCreate two security profile groups: one with antivirus, anti-spyware, and URL filtering for internal users, and one with only antivirus and anti-spyware for partners.
   • CCreate a single security profile group with antivirus and anti-spyware, and apply URL filtering directly to the internal users rule.
   • DApply antivirus and anti-spyware profiles individually to both rules, and add URL filtering only to the internal users rule.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which security profile type would an administrator create to block the download of files with specific extensions, such as .exe or .zip?

   • AFile Blocking
   • BURL Filtering
   • CAnti-Spyware
   • DVulnerability Protection
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   According to Palo Alto Networks best practices, what is the recommended approach for applying security profiles to security policy rules?

   • AApply a security profile group to each rule to ensure consistent threat prevention across all traffic
   • BAvoid applying security profiles to rules that handle encrypted traffic
   • CApply security profiles only to rules that allow traffic to the internet
   • DUse individual security profiles instead of groups to have more granular control
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company has a security policy rule that allows web traffic from the internal network to the internet. The security team wants to enforce antivirus, anti-spyware, and URL filtering on this rule. They have already created individual security profiles for each type. What should they do to apply all three profiles to the rule with minimal administrative overhead?

   • ACreate a security profile group that includes all three profiles and attach the group to the rule.
   • BAttach each individual security profile directly to the rule in the Security Profiles section.
   • CCreate a new security policy rule for each profile and apply one profile per rule.
   • DApply the profiles to the zone instead of the rule.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a best practice when configuring security profile actions?

   • AUse the same action for all signatures regardless of the threat type
   • BDisable logging for profiles that use the 'alert' action
   • CSet the action to 'alert' for new or unknown threats until you understand their impact
   • DSet all actions to 'drop' immediately to maximize security
   Reveal Solution Discussion Select an answer first