Which of the following must be allowed in egress rules for Cortex Cloud components to communicate outbound?

Specific URLs and IP addresses for Cortex Cloud services

Only inbound traffic from Cortex Cloud

Traffic to the customer's on-premises data center only

All outbound traffic to any destination

A large enterprise is deploying Cortex Cloud connectors across multiple VPCs in a single region. The security team wants to minimize the number of egress points and simplify management. They also need to ensure high availability. What is the best approach?

Deploy separate egress points in each VPC with individual NAT gateways.

Deploy a single centralized egress VPC with a NAT gateway and route all connector traffic through it.

Use a single NAT instance in the centralized egress VPC for all traffic.

Deploy a centralized egress VPC with multiple NAT gateways in different availability zones and route connector traffic through them.

What is the role of TLS in Cortex Cloud communication?

To authenticate users accessing the Cortex Cloud console

To compress data for faster transmission

To route traffic to the nearest regional endpoint

To encrypt data in transit between components and Cortex Cloud services

A global company is deploying Cortex Cloud connectors in multiple regions. They have a requirement to minimize egress costs and reduce latency. They are considering using a single regional endpoint for all connectors. What is the best recommendation?

Use a single regional endpoint for all connectors to simplify management.

Use the nearest regional endpoint for each connector to minimize latency and egress costs.

Use a VPN to route all traffic through a central region to reduce costs.

Use a global endpoint that automatically routes to the nearest region.

Which of the following is a best practice for network connectivity to Cortex Cloud?

Allow all outbound traffic to simplify configuration

Use a VPN to connect to Cortex Cloud

Use a proxy server to control and monitor outbound traffic

Palo Alto NetworksCertified Cloud Security Engineer

Domain 1Objective 3

1.3 Determine Network Communication and Connectivity Requirements for Cortex Cloud Components (e.g., Egress Rules, URLs, Ports, Regional Endpoints) CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Part of the Planning and Installation domain, which accounts for 12% of the CLOUD-SECURITY-ENGINEER exam.

17questions here

4free pages

5concepts

12%of the exam

Questions 6–10

6foundation · easy
Which of the following must be allowed in egress rules for Cortex Cloud components to communicate outbound?
Select an answer first
7expert · hard
A large enterprise is deploying Cortex Cloud connectors across multiple VPCs in a single region. The security team wants to minimize the number of egress points and simplify management. They also need to ensure high availability. What is the best approach?
Select an answer first
8foundation · easy
What is the role of TLS in Cortex Cloud communication?
Select an answer first
9expert · hard
A global company is deploying Cortex Cloud connectors in multiple regions. They have a requirement to minimize egress costs and reduce latency. They are considering using a single regional endpoint for all connectors. What is the best recommendation?
Select an answer first
10foundation · easy
Which of the following is a best practice for network connectivity to Cortex Cloud?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.