10.1 Assess Private Cloud Scope and Capacity Requirements NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In an east-west micro-segmentation (uSeg) scope assessment, which traffic pattern is the primary focus?

   • ATraffic between workloads within the same data center
   • BTraffic from the data center to the internet
   • CTraffic between different data centers
   • DTraffic from the internet to the data center
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is planning micro-segmentation (uSeg) for their private cloud. They have 2,000 VMs across 10 application tiers. The security team wants to enforce policies between every tier. They are evaluating whether to use a centralized firewall or distributed enforcement. What is the primary scalability consideration for the uSeg architecture?

   • AThe total throughput of the core firewall
   • BThe number of policy rules that can be managed in Panorama
   • CThe number of enforcement points and their capacity to handle east-west traffic
   • DThe number of VLANs required
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is deploying a private cloud in a single data center. They will have 20,000 users accessing external SaaS applications and internet resources. The security team wants to enforce SSL decryption on all outbound traffic. They estimate an average of 1.5 Gbps of encrypted outbound traffic. Which firewall sizing factor is most critical to determine the correct PA-Series model for the edge?

   • AThe storage capacity for logging
   • BThe number of virtual systems supported
   • CThe SSL decryption throughput capacity
   • DThe maximum sessions per second (SPS) rate
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In a core scope assessment for a private cloud, which traffic type is the primary focus when sizing core firewalls?

   • ABackup traffic
   • BInter-zone traffic
   • CManagement traffic
   • DInternet-bound traffic
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is deploying a private cloud with a single edge firewall. The firewall will be used for internet access and to terminate site-to-site VPNs for remote branches. The total internet traffic is 5 Gbps, and the VPN traffic is 1 Gbps. The security team wants to enable threat prevention on all traffic. What is the minimum throughput rating required for the edge firewall?

   • A6 Gbps firewall throughput
   • B5 Gbps firewall throughput and 1 Gbps IPsec VPN throughput
   • C5 Gbps threat prevention throughput
   • D6 Gbps threat prevention throughput
   Reveal Solution Discussion Select an answer first