CyberSec-Practitioner Sample Questions & Answers
Free Cybersecurity Practitioner practice questions with worked answers and explanations. See how the ExamJungle simulator prepares you — then jump into the full test.
Launch the full CyberSec-Practitioner simulator →Showing 6 of 12 free samples.
- Question 1Advanced
Cloud Security · Prisma Access
An organization is deploying Prisma Access to secure its mobile workforce. They need to ensure that internet-bound traffic from mobile users in Germany exits to the internet from a German IP address to comply with data residency regulations, while users in France exit from France. Which Prisma Access configuration object must be defined to achieve this localized internet breakout?
Show answer & explanation
Correct answer: A
Prisma Access for Mobile Users utilizes Gateways deployed in specific regions. By configuring gateways in Germany and France and ensuring users connect to the gateway nearest them (or enforcing it via region settings), traffic destined for the internet is NATed to the public IP of that specific gateway, satisfying data residency egress requirements.
- Question 2IntermediateSelect 2
Network Security Fundamentals · High Availability
Which TWO actions are required to successfully configure an Active/Passive High Availability (HA) pair of Palo Alto Networks firewalls? (Select TWO)
Show answer & explanation
Correct answers: D, E
HA1 is used for control plane communication (config sync, heartbeats), and HA2 is used for data plane synchronization (sessions, forwarding tables). Both are essential for a functional Active/Passive setup.
For HA to function correctly and be supported, both peers must run the same major PAN-OS version and have matching licenses (e.g., Threat Prevention, WildFire) to ensure capability parity.
- Question 3Intermediate
Management & Reporting · Correlation
A security analyst is reviewing the Automated Correlation Engine (ACE) logs in Panorama. They notice a 'Correlated Event' that groups together a port scan, a brute force attempt, and a subsequent data exfiltration event from the same source IP. What is the primary function of the Correlation Object in this context?
Show answer & explanation
Correct answer: B
Correlation Objects define the criteria (patterns) that the correlation engine looks for across various logs (Traffic, Threat, etc.) to identify complex attacks that single-event signatures might miss. It synthesizes these into a single Correlated Event.
- Question 4Intermediate
Cloud Security · Prisma Cloud Policies
In a Prisma Cloud deployment, an administrator wants to enforce a policy that prevents the deployment of any AWS S3 bucket that is configured with 'Public Read' access. Which type of Policy should be configured to prevent this misconfiguration before the resource is even created?
Show answer & explanation
Correct answer: C
Config Policies in Prisma Cloud monitor and enforce resource configurations. To prevent creation, this would specifically be a build-time check (via IaC scanning) or a run-time remediation, but 'Config Policy' is the correct category for defining the desired state of the resource configuration.
- Question 5Beginner
Decryption · Decryption Modes
True or False: When configuring a Decryption Policy, the 'Forward Proxy' mode is used to decrypt inbound SSL traffic destined for an internal web server where the organization owns the certificate.
Show answer & explanation
Correct answer: B
False. 'Forward Proxy' decryption is used for internal users accessing external sites (outbound). For inbound traffic to internal servers where the organization owns the certificate, 'Inbound Inspection' mode is used.
- Question 6Intermediate
Troubleshooting · CLI Commands
A network administrator needs to verify the connectivity between the management interface of a PA-Series firewall and the Panorama management server. The ping command must be initiated from the specific source interface to ensure the routing path is correct. Which command syntax is correct?
Show answer & explanation
Correct answer: C
The correct CLI syntax to ping from a specific source IP is 'ping source host '. This ensures the traffic originates from the Management interface IP if specified.
Ready for the real thing?
The full CyberSec-Practitioner simulator has every exam-style question, timed mode, and instant scoring.