A small business with a flat network wants to improve security by separating its guest Wi-Fi from the corporate network. The business has a limited budget and a small IT team. Which approach is most appropriate?

Place guest Wi-Fi on the same subnet as corporate devices but use a strong password.

Create a separate VLAN for guest Wi-Fi and enforce a firewall rule to block traffic from the guest VLAN to the corporate VLAN.

Disable the guest Wi-Fi entirely to eliminate the risk.

Deploy host-based microsegmentation agents on every device to enforce granular policies.

How does microsegmentation help prevent lateral movement?

By applying policies that restrict communication between workloads

By encrypting all traffic between segments

By using a single firewall at the network edge

A company is deploying a new application that consists of several microservices. The security team wants to enforce policies that are based on the application's logical components (e.g., frontend, backend, database) rather than on IP addresses. Which approach best supports this requirement?

Deploy a network-based intrusion detection system to monitor traffic between services.

Create separate VLANs for each microservice and configure firewall rules based on IP ranges.

Use a single subnet and rely on the application's own authentication to control access.

Use microsegmentation with policies defined by workload tags or labels.

A company is planning to implement microsegmentation in its data center. The security team is concerned about the potential for policy misconfigurations that could block legitimate traffic. Which practice is most effective in reducing this risk?

Rely on the firewall vendor's default policies to avoid manual errors.

Disable logging to reduce the noise from policy violations.

Deploy all policies at once to ensure immediate coverage.

Use a policy simulation or 'what-if' analysis tool to test the impact of new policies before deployment.

A university IT team is planning to segment its network into student, faculty, and administrative zones. They have a limited number of VLANs available and a small team to manage firewall rules. Which approach balances security and operational simplicity?

Create three VLANs and enforce firewall rules between them based on trust zones.

Deploy microsegmentation agents on every endpoint to enforce per-device policies.

Use a single VLAN for all users and rely on application-layer filtering.

Create a separate VLAN for each user to achieve maximum isolation.

Palo Alto NetworksCertified Network Security Architect

Domain 1Objective 2

1.2 Design and Differentiate Between Network Segmentation and Microsegmentation NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Part of the Zero Trust Enterprise domain, which accounts for 8% of the NETWORK-SECURITY-ARCHITECT exam.

26questions here

6free pages

6concepts

8%of the exam

Questions 6–10

6application · medium
A small business with a flat network wants to improve security by separating its guest Wi-Fi from the corporate network. The business has a limited budget and a small IT team. Which approach is most appropriate?
Select an answer first
7foundation · easy
How does microsegmentation help prevent lateral movement?
Select an answer first
8application · medium
A company is deploying a new application that consists of several microservices. The security team wants to enforce policies that are based on the application's logical components (e.g., frontend, backend, database) rather than on IP addresses. Which approach best supports this requirement?
Select an answer first
9expert · hard
A company is planning to implement microsegmentation in its data center. The security team is concerned about the potential for policy misconfigurations that could block legitimate traffic. Which practice is most effective in reducing this risk?
Select an answer first
10application · medium
A university IT team is planning to segment its network into student, faculty, and administrative zones. They have a limited number of VLANs available and a small team to manage firewall rules. Which approach balances security and operational simplicity?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.