A company is deploying a Strata firewall in a data center with multiple virtual systems. The security team wants to apply different application-based policies to different departments. What is the best way to achieve this?

Use virtual systems to create separate security domains, each with its own application-based policies.

Use separate firewalls for each department.

Use a single security policy for all departments to simplify management.

Use security zones to separate departments and apply policies per zone.

A security analyst is investigating a security incident where a user downloaded a file from a website that was categorized as 'business' but was actually a malicious site. The firewall's URL filtering allowed the traffic because the category was allowed. The analyst wants to prevent this in the future. What is the best approach?

Use a custom URL category to block the specific malicious site.

Disable URL filtering and rely on application identification.

Block all traffic to the 'business' category to prevent malicious sites.

Enable SSL decryption and use threat prevention to inspect the content of the traffic.

Which Strata product feature is responsible for performing Application Layer inspection?

The logging and reporting service

The firewall's security processing engine

In SASE products like Prisma Access, where is Application Layer inspection performed?

On the customer's on-premises firewall

On the user's local device only

In the cloud-delivered security service, as traffic is routed through Prisma Access

How does Application Layer inspection handle encrypted traffic (SSL/TLS) in Palo Alto Networks products?

It forwards encrypted traffic to a third-party service for inspection

It only inspects the metadata of encrypted traffic, not the content

It blocks all encrypted traffic because it cannot be inspected

It decrypts the traffic using SSL/TLS decryption, inspects it, and then re-encrypts it

Palo Alto NetworksCertified Network Security Professional

Domain 1Objective 1

1.1 Explain Application Layer Inspection for Strata and SASE Products NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 1)

Part of the Network Security Fundamentals domain, which accounts for 17% of the NETWORK-SECURITY-PROFESSIONAL exam.

29questions here

6free pages

8concepts

17%of the exam

Questions 1–5

1expert · hard
A company is deploying a Strata firewall in a data center with multiple virtual systems. The security team wants to apply different application-based policies to different departments. What is the best way to achieve this?
Select an answer first
2expert · hard
A security analyst is investigating a security incident where a user downloaded a file from a website that was categorized as 'business' but was actually a malicious site. The firewall's URL filtering allowed the traffic because the category was allowed. The analyst wants to prevent this in the future. What is the best approach?
Select an answer first
3foundation · easy
Which Strata product feature is responsible for performing Application Layer inspection?
Select an answer first
4foundation · easy
In SASE products like Prisma Access, where is Application Layer inspection performed?
Select an answer first
5foundation · easy
How does Application Layer inspection handle encrypted traffic (SSL/TLS) in Palo Alto Networks products?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-PROFESSIONAL” is a trademark of its owner, used for identification only.