4.3 Troubleshoot Device Usage and Health NETWORK-SECURITY-ANALYST Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A firewall's dataplane CPU usage spikes to 100% every time a specific application is used. You need to determine if the application is causing the spike. Which two steps should you take?

   • AUse packet capture to analyze the application's traffic and review the session table during the spike.
   • BDisable the application's security policy to prevent it from being used.
   • CIncrease the dataplane CPU allocation to handle the spike.
   • DReboot the firewall and see if the spike occurs again.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which log type should be examined to find events related to device health, such as interface up/down or high temperature warnings?

   • AThreat log
   • BTraffic log
   • CSystem log
   • DConfiguration log
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A firewall's management plane CPU usage has been consistently above 90% for the past hour, but dataplane CPU usage remains below 20%. Users report that the management web interface is slow to respond. Which two actions should you take first to identify the cause?

   • AReboot the firewall to clear the high CPU usage and then monitor the management plane CPU for the next hour.
   • BCheck the dataplane session table for high session counts and consider increasing the session limit.
   • CDisable the management web interface and use SSH for all management tasks to reduce CPU load.
   • DCheck the system log for management plane events and use the CLI command 'show running resource-monitor' to view per-process CPU usage.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A firewall is experiencing intermittent performance degradation. Which action is most appropriate to detect a software anomaly affecting device health?

   • AClearing the session table
   • BReviewing system logs for critical error messages
   • CIncreasing logging verbosity
   • DDisabling threat prevention
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   You are troubleshooting a firewall that is intermittently dropping traffic. The system log shows no obvious errors. Which two steps should you take to narrow down the cause?

   • ADisable the firewall's security policies to allow all traffic and see if the drops stop.
   • BFilter the system log for severity levels 'warning' and 'critical' and review the dataplane CPU usage during the drops.
   • CCheck the session table for high session counts and increase the session limit.
   • DReboot the firewall to clear any temporary issues causing the drops.
   Reveal Solution Discussion Select an answer first