Palo Alto NetworksCertified Network Security Architect
Domain 9Objective 5
9.5 Design to GCP NGFW Standards NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)
Part of the Public Cloud domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.
19questions here
4free pages
4concepts
11%of the exam
Questions 1–5
- 1
Which HA architecture for NGFW in GCP allows both firewalls to actively process traffic, providing higher throughput?
Select an answer first - 2
A company is designing an NGFW deployment in GCP to inspect traffic from an external load balancer. They have a requirement to minimize latency for the traffic. They are considering two options: (1) placing the NGFW as a backend service of the ELB, or (2) placing the NGFW in front of the ELB. What is the primary trade-off?
Select an answer first - 3
A company needs to deploy an NGFW in GCP with high availability. They require automatic failover if the active node fails, and they want to minimize the number of NGFW instances to reduce cost. Which HA architecture should they choose?
Select an answer first - 4
A company has an external load balancer (ELB) in GCP that distributes traffic to backend instances. They need to inspect all inbound internet traffic before it reaches the backends. What is the recommended design?
Select an answer first - 5
Which GCP feature is commonly used to automatically adjust the number of NGFW instances based on traffic load, contributing to high resilience?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.