A law firm uses Prisma SD-WAN. The IT department wants to allow partners to access legal research databases, but block associates from accessing the same databases. The firm uses Active Directory for authentication. Which feature should be used to enforce this policy?

App-ID to identify the legal research database application and create a policy that allows the application for all users.

User-ID to map Active Directory users to traffic and create a security policy that allows partners and blocks associates.

Device-ID to identify the computers used by partners and associates and create a policy based on device identity.

URL Filtering to categorize the legal research databases and create a policy that blocks the category for associates.

A manufacturing company uses Prisma SD-WAN. The security team wants to prevent branch users from accessing known malicious domains that are used for phishing and malware distribution. Which feature should be enabled?

Threat Prevention to block malware downloads from malicious domains.

URL Filtering to block the phishing and malware web categories.

DNS Security to block queries to known malicious domains.

App-ID to block the applications used by phishing and malware domains.

What is the purpose of Threat Prevention in Prisma SD-WAN?

To detect and block malicious traffic such as exploits and malware

To control access to web categories

To identify users in network traffic

To identify applications in network traffic

What is the primary purpose of Device-ID in Prisma SD-WAN?

To identify the user logged into the device

To identify the type of device generating network traffic

To identify the application being used on the device

To identify the geographic location of the device

A multinational corporation uses Prisma SD-WAN. The security team wants to enforce a policy that blocks peer-to-peer file sharing for all users, but allows a specific application used for internal file sharing. The internal application uses a proprietary protocol that is not in the default App-ID database. Which approach should the team take?

Create a custom App-ID for the internal application and use it in a security policy to allow the application while blocking peer-to-peer traffic.

Use Device-ID to allow the devices used for internal file sharing and block peer-to-peer traffic.

Use URL Filtering to allow the internal application's web address and block peer-to-peer traffic.

Use User-ID to allow the users who use internal file sharing and block peer-to-peer traffic.

Palo Alto NetworksCertified Network Security Architect

Domain 6Objective 2

6.2 Evaluate Advanced Security for Prisma SD-WAN NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Part of the Modernizing Branches domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.

20questions here

4free pages

6concepts

11%of the exam

Questions 6–10

6application · medium
A law firm uses Prisma SD-WAN. The IT department wants to allow partners to access legal research databases, but block associates from accessing the same databases. The firm uses Active Directory for authentication. Which feature should be used to enforce this policy?
Select an answer first
7application · medium
A manufacturing company uses Prisma SD-WAN. The security team wants to prevent branch users from accessing known malicious domains that are used for phishing and malware distribution. Which feature should be enabled?
Select an answer first
8foundation · easy
What is the purpose of Threat Prevention in Prisma SD-WAN?
Select an answer first
9foundation · easy
What is the primary purpose of Device-ID in Prisma SD-WAN?
Select an answer first
10expert · hard
A multinational corporation uses Prisma SD-WAN. The security team wants to enforce a policy that blocks peer-to-peer file sharing for all users, but allows a specific application used for internal file sharing. The internal application uses a proprietary protocol that is not in the default App-ID database. Which approach should the team take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.