A company has a firewall in AWS that terminates VPN connections from remote users. They need to perform a maintenance window to upgrade the firewall OS. What is the most important step to take before starting the upgrade to ensure remote users are not disrupted?

Notify the remote users of the maintenance window.

Back up the firewall configuration.

Check if the VPN gateway is configured for high availability and has a second tunnel.

Disable the VPN termination on the firewall.

A company has a centralized firewall in AWS that performs SSL decryption. They need to upgrade the firewall OS. The firewall is currently handling a high volume of decrypted traffic. What is the most important consideration during the upgrade to avoid a security gap?

Clear the session table before the upgrade to ensure a clean state.

Ensure that the firewall's session table is synchronized to the standby firewall before the upgrade.

Disable SSL decryption during the upgrade to reduce the load on the firewall.

Upgrade the firewall without a standby, as the upgrade is quick.

When planning a maintenance window for a firewall in a cloud environment, which step should be performed FIRST to minimize disruption?

Disconnect the firewall from the network to ensure no traffic is affected during the upgrade.

Upgrade the firewall software to the latest version.

Take a snapshot of the firewall's virtual machine to enable rollback.

Review the current configuration and dependencies, and identify a maintenance window with minimal traffic impact.

A company is deploying a decentralized firewall architecture in AWS, with firewalls in each VPC. They need to terminate site-to-site VPN connections from branch offices. What is a key consideration for VPN termination in this architecture?

VPN termination is not supported in decentralized architectures.

All VPN connections must terminate on a single central firewall.

Each VPC's firewall must have its own VPN termination configuration and public IP address.

A single VPN gateway must be shared across all VPCs.

Palo Alto NetworksCertified Network Security Architect

Domain 9Objective 2

9.2 Design for Maintenance and Security Across CSP Environments NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Part of the Public Cloud domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.

19questions here

4free pages

4concepts

11%of the exam

Questions 16–19

16application · medium
A company has a firewall in AWS that terminates VPN connections from remote users. They need to perform a maintenance window to upgrade the firewall OS. What is the most important step to take before starting the upgrade to ensure remote users are not disrupted?
Select an answer first
17expert · hard
A company has a centralized firewall in AWS that performs SSL decryption. They need to upgrade the firewall OS. The firewall is currently handling a high volume of decrypted traffic. What is the most important consideration during the upgrade to avoid a security gap?
Select an answer first
18foundation · easy
When planning a maintenance window for a firewall in a cloud environment, which step should be performed FIRST to minimize disruption?
Select an answer first
19application · medium
A company is deploying a decentralized firewall architecture in AWS, with firewalls in each VPC. They need to terminate site-to-site VPN connections from branch offices. What is a key consideration for VPN termination in this architecture?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.