1.1 Explain Application Layer Inspection for Strata and SASE Products NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a benefit of Application Layer inspection?

   • AIt eliminates the need for regular signature updates
   • BIt guarantees that all threats are blocked
   • CIt reduces the need for encryption
   • DIt provides visibility into application usage regardless of port or protocol
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a key benefit of performing Application Layer inspection in a SASE product like Prisma Access?

   • AIt requires users to connect through a VPN to the corporate data center
   • BIt provides consistent security policies for users regardless of their location
   • CIt eliminates the need for any encryption of traffic
   • DIt only inspects traffic from managed devices
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In Strata products (e.g., Palo Alto Networks firewalls), where does Application Layer inspection typically occur?

   • AIn the management plane, when policies are configured
   • BOn the firewall itself, in the data plane, as traffic passes through
   • COn a separate logging server that analyzes traffic after the fact
   • DOn the user's endpoint device
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How does Palo Alto Networks identify an application that uses non-standard ports?

   • ABy inspecting the destination IP address to determine the application
   • BBy requiring the user to manually specify the application for each connection
   • CBy blocking any traffic that does not use well-known ports
   • DBy analyzing the traffic characteristics and comparing them against known application signatures
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A network analyst is troubleshooting why a new application is not being identified by the firewall. The application is a custom internal tool that uses a proprietary protocol. What is the most likely reason the firewall cannot identify it?

   • AThe firewall is not configured to inspect traffic on the port the application uses.
   • BThe application does not have a signature in the firewall's application database.
   • CThe application is using SSL/TLS encryption, and decryption is not enabled.
   • DThe firewall's application signatures are outdated and need to be updated.
   Reveal Solution Discussion Select an answer first