3.1 Use Centralized Management System NETWORK-SECURITY-ANALYST Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company has a folder structure with a top-level folder and several subfolders. They have a snippet applied at the top level that defines a security policy. Now they need to override that policy for one specific subfolder. What is the best way to do this?

   • AUse a variable in the top-level snippet to change the policy per subfolder.
   • BCreate a new snippet with the override policy and apply it to the specific subfolder.
   • CRemove the top-level snippet and apply it to each subfolder individually.
   • DEdit the top-level snippet to change the policy for all subfolders.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is a common setting you might configure when setting up log forwarding to the Strata Logging Service?

   • AThe firewall's firmware version
   • BWhich log types to forward (e.g., traffic, threat, system)
   • CThe firewall's hostname
   • DThe firewall's management IP address
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has multiple firewalls that need to allow traffic to different internal servers. They want to use a single security policy rule for all firewalls, but the destination IP address differs per firewall. What should they use in Strata Cloud Manager?

   • AA snippet for each firewall
   • BA folder for each firewall
   • CA separate rule for each firewall
   • DA variable for the destination IP address
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following can be centrally managed in Strata Cloud Manager?

   • AOnly user accounts and authentication
   • BSecurity policies, objects, and device settings
   • COnly firewall hardware and licensing
   • DOnly logging and reporting settings
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a snippet in Strata Cloud Manager?

   • AA reusable configuration fragment that can be applied to multiple firewalls
   • BA type of security policy that blocks malicious traffic
   • CA folder that contains firewall objects
   • DA log entry that records configuration changes
   Reveal Solution Discussion Select an answer first