A company is deploying Palo Alto Networks NGFWs in AWS to inspect traffic between multiple VPCs. They want to use a distributed inspection model where each VPC has its own NGFW instance for inspection. Which AWS service should they use to insert the NGFW into each VPC's network path?

Gateway Load Balancer (GWLB) in each VPC

AWS PrivateLink with the NGFW VPC as a service provider

AWS Transit Gateway with a central NGFW VPC

VPC peering connections between all VPCs

A company is deploying Palo Alto Networks NGFWs in AWS to inspect traffic for multiple VPCs. They want to ensure high resilience and the ability to handle sudden traffic spikes without manual intervention. Which combination of AWS services should they use?

Network Load Balancer (NLB) with a static set of NGFW instances

Transit Gateway with a single NGFW instance

Application Load Balancer (ALB) with the NGFW instances as targets

Gateway Load Balancer (GWLB) with an Auto Scaling group for the NGFW instances

Which mechanism is commonly used in AWS to enable failover between two Palo Alto Networks NGFWs in an HA pair?

Palo Alto Networks HA protocol with floating IP addresses

What is the primary purpose of integrating a Palo Alto Networks NGFW with AWS Gateway Load Balancer (GWLB) in a network design?

To provide DNS-based global server load balancing

To distribute application traffic across multiple web servers

To terminate TLS connections and offload encryption

To provide transparent inline inspection and traffic steering to the firewall

Which AWS feature is essential for a multi-AZ deployment of Palo Alto Networks NGFWs to ensure high resilience?

Deploying firewalls in at least two Availability Zones

Placing all firewalls in the same subnet

Using a single Availability Zone for all firewalls

Using only one firewall instance

Palo Alto NetworksCertified Network Security Architect

Domain 9Objective 3

9.3 Design to AWS NGFW Standards NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Part of the Public Cloud domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.

16questions here

4free pages

6concepts

11%of the exam

Questions 11–15

11application · medium
A company is deploying Palo Alto Networks NGFWs in AWS to inspect traffic between multiple VPCs. They want to use a distributed inspection model where each VPC has its own NGFW instance for inspection. Which AWS service should they use to insert the NGFW into each VPC's network path?
Select an answer first
12application · medium
A company is deploying Palo Alto Networks NGFWs in AWS to inspect traffic for multiple VPCs. They want to ensure high resilience and the ability to handle sudden traffic spikes without manual intervention. Which combination of AWS services should they use?
Select an answer first
13foundation · easy
Which mechanism is commonly used in AWS to enable failover between two Palo Alto Networks NGFWs in an HA pair?
Select an answer first
14foundation · easy
What is the primary purpose of integrating a Palo Alto Networks NGFW with AWS Gateway Load Balancer (GWLB) in a network design?
Select an answer first
15foundation · easy
Which AWS feature is essential for a multi-AZ deployment of Palo Alto Networks NGFWs to ensure high resilience?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.