2.6 Identify and Describe the Deployment Options for NGFWs for Networks Operation on Both Bare Metal and Virtualized Architectures CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A financial trading firm currently runs its NGFW as a VM on a shared hypervisor. After a performance audit, they found that during peak trading hours, the firewall's throughput drops by 40% due to 'noisy neighbor' VMs consuming CPU and memory. The firm cannot tolerate this variance and has budget to replace the solution. Which approach best addresses the root cause?

   • AEnable network I/O control on the virtual switch
   • BIncrease the VM's CPU reservation and memory limit on the hypervisor
   • CMigrate the NGFW to a dedicated bare-metal appliance
   • DMove the VM to a different host in the cluster
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A company must deploy a next-generation firewall (NGFW) for a core data center with a sustained, high-volume traffic profile. Which deployment architecture is most appropriate for this use case?

   • AVirtualized, because it is easier to migrate to a different host if the hardware fails
   • BAny architecture is equally suitable for this workload
   • CBare-metal, because it offers the highest performance and lowest latency for demanding workloads
   • DContainerized, because it provides the best raw packet processing performance
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   An organization is planning to deploy a next-generation firewall (NGFW) on a dedicated physical appliance. What is a key management consideration for this type of deployment?

   • AManagement is not possible after the initial configuration is applied
   • BManagement is typically performed through a separate management interface or a centralized management platform
   • CManagement requires physical console access for every configuration change
   • DManagement is exclusively performed through the hypervisor's web interface
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A managed service provider (MSP) hosts a multi-tenant platform. They need to deploy NGFWs for tenants who have varying performance requirements: some need 20 Gbps dedicated throughput, while others only need 1 Gbps. The MSP wants to minimize hardware costs and management overhead. Which approach is most cost-effective and operationally efficient?

   • ADeploy bare-metal NGFWs for high-performance tenants and virtualized NGFWs for low-performance tenants
   • BDeploy virtualized NGFWs for all tenants on a single host
   • CDeploy a single large bare-metal NGFW for all tenants
   • DDeploy a separate bare-metal NGFW for every tenant regardless of size
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A large enterprise is planning a major data center refresh. They currently run a mix of bare-metal and virtualized NGFWs. The new architecture must support dynamic workload migration between hosts and allow the security team to scale firewall capacity without purchasing new hardware. However, a legacy application requires a physical firewall connection for audit compliance. Which strategy best meets these conflicting requirements?

   • AKeep one bare-metal NGFW for the legacy app and virtualize all other NGFWs
   • BMove the legacy application to a VM to eliminate the physical requirement
   • CVirtualize all NGFWs and use a physical tap for the legacy application
   • DUse a virtual NGFW for everything and document the exception
   Reveal Solution Discussion Select an answer first