1.1 Create and Apply Security Profiles and Security Profile Groups NETWORK-SECURITY-ANALYST Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A firewall administrator has a security policy rule that allows outbound web traffic. The rule currently has a security profile group attached that includes antivirus, anti-spyware, and URL filtering. The administrator needs to add vulnerability protection to this rule without affecting other rules that use the same group. What should the administrator do?

   • AAttach the vulnerability protection profile directly to the rule in addition to the group.
   • BEdit the existing group to add the vulnerability protection profile.
   • CClone the existing group, add the vulnerability protection profile to the clone, and attach the clone to the rule.
   • DCreate a new security policy rule for the traffic and apply a new group with vulnerability protection.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A firewall administrator needs to update the anti-spyware profile that is part of a security profile group used by several rules. The update should change the action for a specific spyware signature from 'alert' to 'block'. The administrator wants to ensure that the change takes effect immediately for all rules using the group. What should the administrator do?

   • ADelete the group and recreate it with a new anti-spyware profile.
   • BEdit the anti-spyware profile directly and change the action for the signature.
   • CCreate a new anti-spyware profile and apply it directly to each rule.
   • DClone the anti-spyware profile, modify the clone, and update the group to use the clone.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization has separate security profiles for antivirus, anti-spyware, vulnerability protection, and URL filtering. They want to apply these profiles to multiple security policy rules that allow different types of traffic. What is the most efficient way to manage these profiles across the rules?

   • AApply the profiles to the interface instead of the rules.
   • BCreate a new security policy rule for each profile.
   • CApply each profile individually to each rule.
   • DCreate a security profile group with all four profiles and apply the group to each rule.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the effect of applying a security profile group to a security policy rule?

   • AThe firewall will only log traffic matching the rule without any inspection
   • BThe firewall will inspect traffic matching the rule using all the security profiles included in the group
   • CThe firewall will create a new security policy rule for each profile in the group
   • DThe firewall will block all traffic matching the rule regardless of the profiles
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   How do you apply a security profile group to a security policy rule?

   • AIn the 'Applications' tab of the security policy rule, select the profile group from the 'Applications' drop-down
   • BIn the 'Destination' tab of the security policy rule, select the profile group from the 'Destination' drop-down
   • CIn the 'Source' tab of the security policy rule, select the profile group from the 'Source' drop-down
   • DIn the 'Actions' tab of the security policy rule, select the profile group from the 'Profile Setting' drop-down
   Reveal Solution Discussion Select an answer first