A company is deploying Palo Alto Networks NGFWs in AWS to inspect traffic between multiple VPCs. They want to use a centralized inspection model where all inter-VPC traffic is routed through a central NGFW VPC. Which AWS service should they use to route traffic to the central NGFW VPC?

VPC peering connections between all VPCs

AWS PrivateLink with the NGFW VPC as a service provider

Internet Gateway with a NAT Gateway in the NGFW VPC

AWS Transit Gateway with route tables directing traffic to the NGFW VPC

What is the primary benefit of using AWS Transit Gateway Connect to connect a Palo Alto Networks NGFW to a Transit Gateway?

Reduced latency compared to VPC peering

Simplified routing and high bandwidth

Automatic encryption of all traffic

Which protocol is used by AWS Transit Gateway Connect to establish connectivity between the Transit Gateway and a Palo Alto Networks NGFW?

Generic Routing Encapsulation (GRE)

What is the purpose of configuring subinterfaces on a Palo Alto Networks NGFW in AWS?

To increase the physical bandwidth of the interface

To reduce the number of required security policies

To enable the firewall to act as a switch

To segment traffic and support multiple virtual routers or VLANs

In AWS, how are subinterfaces on a Palo Alto Networks NGFW typically associated with network traffic?

By using VLAN tags on the traffic

By using the destination port of the traffic

By using the source IP address of the traffic

By using the AWS security group of the instance

Palo Alto NetworksCertified Network Security Architect

Domain 9Objective 3

9.3 Design to AWS NGFW Standards NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Part of the Public Cloud domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.

16questions here

4free pages

6concepts

11%of the exam

Questions 1–5

1application · medium
A company is deploying Palo Alto Networks NGFWs in AWS to inspect traffic between multiple VPCs. They want to use a centralized inspection model where all inter-VPC traffic is routed through a central NGFW VPC. Which AWS service should they use to route traffic to the central NGFW VPC?
Select an answer first
2foundation · easy
What is the primary benefit of using AWS Transit Gateway Connect to connect a Palo Alto Networks NGFW to a Transit Gateway?
Select an answer first
3foundation · easy
Which protocol is used by AWS Transit Gateway Connect to establish connectivity between the Transit Gateway and a Palo Alto Networks NGFW?
Select an answer first
4foundation · easy
What is the purpose of configuring subinterfaces on a Palo Alto Networks NGFW in AWS?
Select an answer first
5foundation · easy
In AWS, how are subinterfaces on a Palo Alto Networks NGFW typically associated with network traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.