A network team has a snippet that defines a security policy rule with a variable for the destination IP. They need to apply this snippet to multiple firewalls, but each firewall has a different destination IP. What is the best way to manage this?

Create a variable for the destination IP and set a different value for each firewall.

Create a separate snippet for each firewall with the IP hardcoded.

Apply the snippet to a folder and manually edit the rule on each firewall.

Use a single variable value for all firewalls.

A firewall administrator needs to apply a new security policy to all firewalls in the 'Sales' folder, but the policy should not affect firewalls in other folders. What is the best way to do this?

Create a snippet and apply it to the top-level folder.

Create a snippet with the policy and apply it to the 'Sales' folder.

Create a variable and use it in the policy.

Manually configure the policy on each firewall in the Sales folder.

A security analyst needs to investigate a potential breach by searching firewall logs for traffic to a specific malicious IP address over the past 30 days. Where should they perform this search?

In the Strata Logging Service search interface

A network team wants to automatically receive an email notification whenever a firewall in Strata Cloud Manager is added to a folder. What should they configure?

An automation that triggers on the 'firewall added' event and sends an email.

A variable that triggers an email when its value changes.

A log forwarding profile to send an email when a firewall is added.

A snippet that includes an email notification action.

How does a firewall typically get onboarded to Strata Cloud Manager?

By manually configuring the firewall's management IP to match SCM's IP

By connecting the firewall to the SCM via a serial console cable

By registering the firewall with a cloud-based activation code or certificate

By importing a configuration file from a USB drive

Palo Alto NetworksCertified Network Security Analyst

Domain 3Objective 1

3.1 Use Centralized Management System NETWORK-SECURITY-ANALYST Practice Questions (Page 7)

Part of the Management and Operations domain, which accounts for 26% of the NETWORK-SECURITY-ANALYST exam.

40questions here

8free pages

12concepts

26%of the exam

Questions 31–35

31expert · hard
A network team has a snippet that defines a security policy rule with a variable for the destination IP. They need to apply this snippet to multiple firewalls, but each firewall has a different destination IP. What is the best way to manage this?
Select an answer first
32application · medium
A firewall administrator needs to apply a new security policy to all firewalls in the 'Sales' folder, but the policy should not affect firewalls in other folders. What is the best way to do this?
Select an answer first
33application · medium
A security analyst needs to investigate a potential breach by searching firewall logs for traffic to a specific malicious IP address over the past 30 days. Where should they perform this search?
Select an answer first
34application · medium
A network team wants to automatically receive an email notification whenever a firewall in Strata Cloud Manager is added to a folder. What should they configure?
Select an answer first
35foundation · easy
How does a firewall typically get onboarded to Strata Cloud Manager?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ANALYST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ANALYST” is a trademark of its owner, used for identification only.