A company wants to isolate its guest Wi-Fi network from the internal corporate network to prevent lateral movement. They are using a Strata firewall. What is the most effective way to achieve this?

Use User-ID to block guest users from accessing internal resources

Configure Device-ID to block unknown devices from the internal network

Enable Content-ID to block guest traffic to internal applications

Place the guest network in a separate security zone and create a deny rule between zones

A company is moving to a Zero Trust model. They currently have a flat network with no segmentation. They want to implement micro-segmentation to limit lateral movement. Which approach is most aligned with Zero Trust principles?

Implement VLANs for segmentation but allow all traffic between VLANs

Use User-ID to identify users and allow all traffic from authenticated users

Create security zones for each application tier and enforce allow rules only for required traffic between zones

Use a single zone for all internal traffic and rely on host-based firewalls

Palo Alto NetworksCertified Network Security Professional

Domain 1Objective 4

1.4 Explain the Application of Network Hardening Methods for Enhanced Security on Strata and SASE Products (e.g., Content-ID, Zero Trust, User-ID, Device-ID, Zones) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 5)

Part of the Network Security Fundamentals domain, which accounts for 17% of the NETWORK-SECURITY-PROFESSIONAL exam.

27questions here

6free pages

7concepts

17%of the exam

Questions 21–25

21expert · hard · select all that apply
A healthcare provider is implementing a Zero Trust architecture for remote access to patient records. They need to enforce least-privilege access based on user role, device compliance, and network location. Which two features are essential to enforce these requirements? (Select all that apply.)
Select an answer first
22application · medium
A company wants to isolate its guest Wi-Fi network from the internal corporate network to prevent lateral movement. They are using a Strata firewall. What is the most effective way to achieve this?
Select an answer first
23application · medium
A company uses Prisma Access to secure remote workers. They want to prevent sensitive files from being uploaded to a public file-sharing site, but only for users in the Finance group. Which two features must be combined to achieve this?
Select an answer first
24foundation · easy
Which of the following is an example of a device attribute that Device-ID can use to identify a device?
Select an answer first
25expert · hard
A company is moving to a Zero Trust model. They currently have a flat network with no segmentation. They want to implement micro-segmentation to limit lateral movement. Which approach is most aligned with Zero Trust principles?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-PROFESSIONAL” is a trademark of its owner, used for identification only.

1.4 Explain the Application of Network Hardening Methods for Enhanced Security on Strata and SASE Products (e.g., Content-ID, Zero Trust, User-ID, Device-ID, Zones) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 5)

Questions 21–25

A healthcare provider is implementing a Zero Trust architecture for remote access to patient records. They need to enforce least-privilege access based on user role, device compliance, and network location. Which two features are essential to enforce these requirements? (Select all that apply.)

A company wants to isolate its guest Wi-Fi network from the internal corporate network to prevent lateral movement. They are using a Strata firewall. What is the most effective way to achieve this?

A company uses Prisma Access to secure remote workers. They want to prevent sensitive files from being uploaded to a public file-sharing site, but only for users in the Finance group. Which two features must be combined to achieve this?

Which of the following is an example of a device attribute that Device-ID can use to identify a device?

A company is moving to a Zero Trust model. They currently have a flat network with no segmentation. They want to implement micro-segmentation to limit lateral movement. Which approach is most aligned with Zero Trust principles?

Keep studying — Network Security Fundamentals