Palo Alto NetworksCertified Network Security Architect
Domain 9Objective 3
9.3 Design to AWS NGFW Standards NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)
Part of the Public Cloud domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.
16questions here
4free pages
6concepts
11%of the exam
Questions 6–10
- 6
A company is deploying Palo Alto Networks NGFWs in AWS to inspect traffic between VPCs. They want to insert the NGFW transparently without changing the source or destination IP addresses of the traffic, and they need the solution to scale horizontally as traffic increases. Which AWS service should they use to achieve this?
Select an answer first - 7
In an AWS deployment, what is the purpose of placing a Palo Alto Networks NGFW HA pair across two availability zones?
Select an answer first - 8
Which AWS NGFW insertion model is best described as placing the Palo Alto Networks NGFW in a central inspection VPC and routing traffic from multiple spoke VPCs through it for security inspection?
Select an answer first - 9
A company is deploying Palo Alto Networks NGFWs in AWS to inspect traffic between multiple VPCs. They need to segment traffic from different VPCs using separate virtual routers on the NGFW to enforce different security policies. Which NGFW feature should they use?
Select an answer first - 10
What is the primary purpose of using AWS Auto Scaling for Palo Alto Networks NGFW instances in a deployment?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.