6.2 Evaluate Advanced Security for Prisma SD-WAN NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How is DNS Security typically configured within Prisma SD-WAN?

   • ABy enabling URL filtering in the security policy
   • BBy enabling Device-ID in the security policy
   • CBy enabling DNS security in the security policy and configuring the DNS sinkhole
   • DBy enabling App-ID in the security policy
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A logistics company uses Prisma SD-WAN. The security team wants to prioritize video conferencing traffic over other traffic on the WAN, but only when the video conferencing application is used for business purposes. Which feature should be used to identify the traffic for prioritization?

   • AApp-ID to identify the video conferencing application and apply a QoS policy.
   • BDevice-ID to identify the devices used for video conferencing and apply a QoS policy.
   • CUser-ID to identify the users who use video conferencing and apply a QoS policy.
   • DURL Filtering to identify the video conferencing web category and apply a QoS policy.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A school district uses Prisma SD-WAN. The administration wants to block students from accessing social media and gambling websites, but allow teachers to access social media for educational purposes. Which feature should be used to enforce this policy?

   • AApp-ID to block social media and gambling applications, combined with Device-ID to allow teacher devices.
   • BThreat Prevention to block malicious content in social media and gambling sites.
   • CURL Filtering to block the social media and gambling categories, combined with User-ID to allow teachers.
   • DDNS Security to block the domains associated with social media and gambling sites.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A telecommunications company uses Prisma SD-WAN. The security team wants to block access to known malicious domains, but allow access to a specific domain that is used for internal testing. The internal testing domain is not categorized as malicious. Which approach should the team take?

   • AEnable URL Filtering to block the malicious web category and allow the internal testing domain.
   • BEnable App-ID to block the applications used by malicious domains and allow the internal testing domain.
   • CEnable Threat Prevention to block malware from malicious domains and allow the internal testing domain.
   • DEnable DNS Security to block malicious domains and create an exception for the internal testing domain.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A financial services company uses Prisma SD-WAN. The security team wants to block known malware command-and-control (C2) traffic and prevent exploitation of vulnerabilities in web applications accessed by branch users. Which two security features should be enabled together?

   • ADevice-ID to block unregistered devices and User-ID to restrict access to sensitive applications.
   • BThreat Prevention with vulnerability protection and antivirus profiles, and DNS Security to block known malicious domains.
   • CDNS Security to block malicious domains and URL Filtering to block adult content.
   • DURL Filtering to block malicious web categories and App-ID to block peer-to-peer traffic.
   Reveal Solution Discussion Select an answer first