2.6 Explain the Deployment and Configuration Process for Broker VM CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   An organization has deployed Broker VM in Azure to forward DNS traffic to Palo Alto Networks DNS Security. They notice that DNS queries are not being inspected. The Broker VM is healthy and the network interfaces are configured correctly. What is the most likely cause of this issue?

   • AThe Broker VM is not configured to send DNS traffic to the DNS Security cloud service.
   • BThe DNS server's IP address is not added to the Broker VM's allow list.
   • CThe Broker VM's management interface is not reachable from the DNS servers.
   • DThe DNS queries are being sent over TCP instead of UDP.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is a prerequisite for deploying Broker VM in a cloud environment?

   • AA valid license for the cloud-delivered security services
   • BA VPN connection to the Palo Alto Networks cloud
   • CA Palo Alto Networks firewall already deployed in the same VPC
   • DA dedicated physical server for the VM
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   After deploying Broker VM, what is required to complete the initial setup?

   • AConnecting to the VM via SSH and running the initial configuration wizard
   • BInstalling a third-party antivirus on the VM
   • CCreating a new VPC in the cloud platform
   • DConfiguring a VPN tunnel to the Palo Alto Networks cloud
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which security service can Broker VM integrate with to provide DNS security?

   • ADNS Security
   • BCortex XDR
   • CPrisma Access
   • DGlobalProtect
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security administrator notices that Broker VM is not forwarding DNS traffic after a recent network change. The Broker VM is running, but the dataplane interface is not receiving any traffic. What is the most likely cause?

   • AThe DNS Security integration was disabled during the network change.
   • BThe Broker VM's dataplane interface is configured with the wrong IP address.
   • CThe Broker VM's management interface was accidentally assigned to the dataplane subnet.
   • DThe network change removed the route that directs DNS traffic to the Broker VM.
   Reveal Solution Discussion Select an answer first