Official Bank 0/60

Network Security Professional (NetSec-Pro) - PaloAlto Networks Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
60 Total Questions
1
Question
Which two tools can be used to configure Cloud NGFWs for AWS? (Choose two.)
Select 2
Options
A Cloud service provider's management console
B Prisma Cloud management console
C Panorama
D Cortex XSIAM
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
A network engineer pushes specific Panorama reports of new AI URL category types to branch NGFWs. Which two report types achieve this goal? (Choose two.)
Select 2
Options
A CSV export
B Custom
C PDF summary
D SNMP
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
During a security incident investigation, which Security profile will have logs of attempted confidential data exfiltration?
Options
A WildFire Analysis Profile
B Vulnerability Protection Profile
C Enterprise DLP Profile
D File Blocking Profile
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which action optimizes user experience across a segmented network architecture and implements the most effective method to maintain secure connectivity between branch and campus locations?
Options
A Configure a single campus firewall to handle the routing of all branch traffic.
B Implement SD-WAN to route all traffic based on network performance metrics and use zone protection profiles.
C Configure all branch and campus firewalls to use a single shared broadcast domain.
D Establish site-to-site tunnels on each branch and campus firewall and have individual VLANs for each department.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
A network administrator obtains Palo Alto Networks Advanced Threat Prevention and Advanced DNS Security subscriptions for edge NGFWs and is setting up security profiles. Which step should be included in the initial configuration of the Advanced DNS Security service?
Options
A Enable Advanced Threat Prevention with default settings and only focus on high-risk traffic.
B Create overrides for all company owned FQDNs.
C Configure DNS Security signature policy settings to sinkhole malicious DNS queries.
D Create a decryption policy rule to decrypt DNS-over-TLS / port 853 traffic.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.