Palo Alto NetworksCertified Network Security Analyst
Domain 4Objective 1
4.1 Troubleshoot Misconfigurations Across All Management and On-Box Options NETWORK-SECURITY-ANALYST Practice Questions (Page 2)
Part of the Troubleshooting domain, which accounts for 14% of the NETWORK-SECURITY-ANALYST exam.
21questions here
5free pages
7concepts
14%of the exam
Questions 6–10
- 6
An administrator is unable to access the firewall's web interface from a remote location. The management interface is configured with an IP address, netmask, and default gateway. Which additional setting is required for remote management access?
Select an answer first - 7
An administrator has an intended configuration that specifies a security policy should allow HTTP traffic from the internal network to the web server. The actual configuration shows the policy is set to deny. What is the most likely cause of this discrepancy?
Select an answer first - 8
Users report that a specific application is slow through the firewall. The admin suspects a dataplane misconfiguration. Which CLI command would best help the admin identify if the issue is related to session setup or data transfer?
Select an answer first - 9
A firewall's management interface is configured with an access list that permits only the IP address 192.168.1.10. An administrator attempts to connect to the management interface from a workstation with IP address 192.168.1.20 and is unable to establish a session. Which misconfiguration is most likely causing this issue?
Select an answer first - 10
Users report that a specific application is intermittently failing to connect through the firewall. The security policy allows the application, and the admin sees sessions being created and torn down quickly. The admin suspects a dataplane misconfiguration. Which CLI command would best help the admin diagnose the issue?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ANALYST” is a trademark of its owner, used for identification only.