A security team wants to automate the process of adding new IP addresses to an address group used in a security policy. They want the update to be applied to all firewalls in a folder automatically. What is the best way to achieve this?

Use an automation that updates the address group object and pushes the configuration.

Use a folder that automatically updates address groups.

Use a variable that holds the IP addresses and update it manually.

Use a snippet that includes the address group and reapply it.

A firewall administrator has configured firewalls to send logs to the Strata Logging Service, but logs are not appearing in the service. What is the most likely cause?

The firewalls are not using variables.

The Strata Logging Service is not licensed.

The log forwarding profile is not configured on the firewalls.

The firewalls are not in a folder.

A security analyst needs to generate a report showing the top 10 source IPs generating the most traffic in the last 7 days. They have access to the Strata Logging Service. What is the best way to create this report?

Use a variable to store the report data.

Use the Strata Logging Service search to query logs and create a report.

Use an automation to generate the report.

Use a snippet to define the report.

What is a primary use of the Strata Logging Service for security monitoring?

Configuring firewall interfaces

Searching and analyzing firewall logs to investigate security incidents

Automatically blocking malicious IP addresses

An organization is adopting Strata Cloud Manager for the first time. They have 50 firewalls deployed across multiple sites. What is the first step to manage these firewalls centrally?

Onboard the firewalls to Strata Cloud Manager

Configure automations for log collection

Set up the Strata Logging Service

Palo Alto NetworksCertified Network Security Analyst

Domain 3Objective 1

3.1 Use Centralized Management System NETWORK-SECURITY-ANALYST Practice Questions (Page 5)

Part of the Management and Operations domain, which accounts for 26% of the NETWORK-SECURITY-ANALYST exam.

40questions here

8free pages

12concepts

26%of the exam

Questions 21–25

21expert · hard
A security team wants to automate the process of adding new IP addresses to an address group used in a security policy. They want the update to be applied to all firewalls in a folder automatically. What is the best way to achieve this?
Select an answer first
22application · medium
A firewall administrator has configured firewalls to send logs to the Strata Logging Service, but logs are not appearing in the service. What is the most likely cause?
Select an answer first
23expert · hard
A security analyst needs to generate a report showing the top 10 source IPs generating the most traffic in the last 7 days. They have access to the Strata Logging Service. What is the best way to create this report?
Select an answer first
24foundation · easy
What is a primary use of the Strata Logging Service for security monitoring?
Select an answer first
25application · medium
An organization is adopting Strata Cloud Manager for the first time. They have 50 firewalls deployed across multiple sites. What is the first step to manage these firewalls centrally?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ANALYST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ANALYST” is a trademark of its owner, used for identification only.