3.1 Use Centralized Management System NETWORK-SECURITY-ANALYST Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company has two groups of firewalls: one for production and one for development. They want to apply different security policies to each group, but share some common objects like address groups. What is the best way to structure this in Strata Cloud Manager?

   • APlace all firewalls in one folder and use variables to differentiate policies.
   • BCreate a snippet for each group and apply it to all firewalls.
   • CCreate two folders and duplicate the common objects in each folder.
   • DCreate two folders (Production and Development) and place the common objects in a snippet applied to both folders.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is a key benefit of using the Strata Logging Service?

   • AIt provides a local backup of firewall configurations
   • BIt replaces the need for firewall policies
   • CIt automatically blocks all malicious traffic
   • DIt provides scalable, centralized log storage without requiring on-premises hardware
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A small business with 10 firewalls wants to reduce the overhead of managing each firewall individually. They want a single pane of glass for policy management and log viewing. What should they adopt?

   • AA snippet for each firewall
   • BA folder for each firewall
   • CAn automation for each firewall
   • DStrata Cloud Manager with Strata Logging Service
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following can trigger an automation in Strata Cloud Manager?

   • AA change in the weather
   • BA user logging into the firewall locally
   • CA manual command entered on the firewall CLI
   • DA scheduled time or a specific event on a firewall
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary role of Strata Cloud Manager (SCM) in a Palo Alto Networks environment?

   • AA cloud-based centralized management platform for configuring and monitoring Palo Alto Networks firewalls
   • BAn on-premises software appliance that replaces the need for Panorama in large deployments
   • CA firewall inspection engine that provides advanced threat prevention in the cloud
   • DA logging and reporting service that stores firewall logs in the cloud
   Reveal Solution Discussion Select an answer first