9.5 Design to GCP NGFW Standards NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   An organization needs to inspect traffic between workloads within the same VPC. Which GCP NGFW insertion mode is most appropriate?

   • AInline VPC
   • BHub-and-spoke
   • CCentralized inspection
   • DExternal peering
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is migrating its on-premises data center to GCP. They have multiple VPCs, each hosting different application tiers, and they want to enforce consistent security policies across all east-west traffic between VPCs. They also need to inspect traffic between on-premises and GCP. Which NGFW insertion mode should they choose?

   • AExternal load balancer integration
   • BActive/active HA pair in a single VPC
   • CInline VPC insertion in each VPC
   • DHub-and-spoke with centralized inspection
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company wants to deploy NGFW in GCP with high resilience. They expect variable traffic patterns and want to automatically adjust the number of NGFW instances based on load. What should they use?

   • AAn active/passive HA pair
   • BA single NGFW instance with a larger machine type
   • CA managed instance group with autoscaling
   • DA static set of NGFW instances
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is a primary benefit of deploying NGFW instances across multiple zones in GCP for high resilience?

   • AIt reduces network latency for all users
   • BIt eliminates the need for load balancers
   • CIt simplifies firewall rule management
   • DIt provides redundancy in case of a zone failure
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company is integrating an NGFW with an external load balancer in GCP. They want to inspect all inbound traffic. They have two options: (1) place the NGFW as a backend service of the ELB, or (2) place the NGFW in front of the ELB. They are concerned about the impact on the ELB's health checks. What is the key consideration?

   • ABoth options have the same impact on health checks
   • BPlacing the NGFW as a backend service requires the NGFW to respond to health checks
   • CPlacing the NGFW in front of the ELB requires the NGFW to forward health checks to the ELB
   • DHealth checks are not affected by the NGFW placement
   Reveal Solution Discussion Select an answer first