1.1 Explain Application Layer Inspection for Strata and SASE Products NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is experiencing performance issues on its Strata firewall. The security team suspects that application layer inspection is causing high CPU usage. They have already enabled SSL decryption and are using multiple security profiles. What is the most effective way to reduce the performance impact while maintaining security?

   • ADisable application layer inspection entirely to improve performance.
   • BUse selective SSL decryption and limit the number of security profiles applied to traffic.
   • CUpgrade the firewall's hardware to a higher model.
   • DIncrease the firewall's logging level to capture more information.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following best describes the role of signatures in application identification?

   • ASignatures are used only for malware detection, not application identification
   • BSignatures are based solely on the source IP address
   • CSignatures are unique patterns that help match traffic to a known application
   • DSignatures are static and never updated
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is adopting Prisma Access for its remote workforce. The security team wants to enforce the same application-based policies for remote users as they have for on-premises users. What is the primary consideration for implementing application layer inspection in Prisma Access?

   • APrisma Access does not support SSL decryption, so application inspection is limited.
   • BPrisma Access can only inspect traffic that is destined to the internet, not internal applications.
   • CPrisma Access requires a separate set of application signatures that are different from Strata firewalls.
   • DPrisma Access uses the same App-ID technology as Strata firewalls, so the same security policies can be applied to remote users.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company is deploying a Strata firewall in a high-availability pair. The security team wants to ensure that application inspection is performed consistently across both firewalls. What must be configured to achieve this?

   • AEnable the 'application inspection' feature only on the primary firewall.
   • BPlace the firewalls in different security zones to distribute the inspection load.
   • CConfigure the firewalls to use different application signatures to avoid overlap.
   • DEnsure that the same security policies and application signatures are applied to both firewalls, and that they are synchronized.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security architect is evaluating the limitations of application layer inspection in a Strata firewall. The organization has a requirement to inspect all traffic, including encrypted traffic, for command-and-control (C2) activity. What is a realistic limitation that the architect should consider?

   • AApplication layer inspection cannot identify any applications that use encryption.
   • BApplication layer inspection cannot block any traffic; it can only log it.
   • CSSL decryption may not be possible for all traffic due to certificate pinning or legal/regulatory constraints.
   • DApplication layer inspection is only available on Strata firewalls, not in SASE products.
   Reveal Solution Discussion Select an answer first