1.1 Explain Application Layer Inspection for Strata and SASE Products NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a limitation of Application Layer inspection?

   • AIt requires a separate physical appliance for each application
   • BIt cannot identify any applications that use standard ports
   • CIt only works with unencrypted traffic
   • DIt can introduce latency because of the deep packet inspection required
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A network administrator notices that a user is accessing a website that is categorized as 'personal storage and backup'. The firewall is configured with a security policy that blocks the 'personal storage and backup' category, yet the traffic is being allowed. The administrator suspects the application is using SSL/TLS encryption. What is the most likely reason the firewall is not identifying the application correctly?

   • AThe firewall is not configured to decrypt the SSL/TLS traffic, so it cannot inspect the application payload to identify the specific application.
   • BThe security policy is misconfigured and is allowing the traffic despite the category block.
   • CThe application is using a non-standard port that the firewall does not inspect.
   • DThe firewall's application signatures are outdated and need to be updated to recognize the latest version of the application.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security engineer is configuring a Strata firewall to enforce a policy that blocks the use of a specific peer-to-peer file-sharing application. The application is known to use dynamic ports and obfuscation techniques. Which approach will most reliably identify and block this application?

   • ABlock the IP addresses of known trackers and peers associated with the application.
   • BCreate a security policy that blocks the application by its App-ID, which uses a combination of signatures and behavioral analysis to identify the traffic.
   • CBlock all traffic on the ports commonly used by peer-to-peer applications.
   • DEnable SSL decryption and block the application based on its certificate.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a common reason to use SSL/TLS decryption in Application Layer inspection?

   • ATo allow users to bypass security policies
   • BTo speed up the encryption process
   • CTo detect threats that are hidden inside encrypted traffic
   • DTo ensure that all traffic is encrypted with stronger algorithms
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security architect is designing a solution for a large enterprise that needs to inspect traffic for a mix of on-premises and remote users. The enterprise has a requirement to apply the same application-based policies to both groups. The architect is considering using Prisma Access for remote users and Strata firewalls for on-premises users. What is a key consideration for ensuring consistent application inspection?

   • AUse Panorama to manage both Strata firewalls and Prisma Access, ensuring consistent policy and application signature updates.
   • BConfigure the Strata firewalls to send traffic to Prisma Access for inspection.
   • CUse different application signatures for Strata and Prisma Access to avoid conflicts.
   • DUse separate security policies for on-premises and remote users to account for different threats.
   Reveal Solution Discussion Select an answer first