A company is designing an NGFW deployment in GCP for high resilience. They have a requirement to inspect traffic from an external load balancer. They want to use autoscaling to handle variable traffic. What is the primary challenge they need to address?

The external load balancer must be configured to distribute traffic to the autoscaling group

The autoscaling group must be configured to scale based on the ELB's traffic

The NGFW instances in the autoscaling group must be in the same zone

The autoscaling group must be configured to scale down to zero instances

A company is designing an NGFW deployment in GCP for high resilience. They have a requirement to maintain a predictable baseline performance for a critical application, but they also want to handle occasional traffic spikes. They are considering using autoscaling for the NGFW. What is the primary trade-off they need to manage?

Autoscaling will reduce the availability of the NGFW

Autoscaling will require a larger machine type for each instance

Autoscaling may introduce latency during scale-out events

Autoscaling will increase the cost of the deployment

A company is deploying an NGFW in GCP for a mission-critical application. They have a strict budget and want to minimize cost while ensuring high availability. They also need to inspect traffic between two VPCs. They are considering an active/passive HA pair in a single zone. What is the most significant risk with this design?

The cost will be higher than an active/active design

The passive node will not be able to take over if the active node fails

The NGFW will not be able to inspect traffic between VPCs

A zone failure will cause a complete outage

Palo Alto NetworksCertified Network Security Architect

Domain 9Objective 5

9.5 Design to GCP NGFW Standards NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Part of the Public Cloud domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.

19questions here

4free pages

4concepts

11%of the exam

Questions 16–19

16foundation · easy
Which GCP load balancer type is typically used to steer inbound internet traffic to an NGFW for inspection before it reaches backend workloads?
Select an answer first
17expert · hard
A company is designing an NGFW deployment in GCP for high resilience. They have a requirement to inspect traffic from an external load balancer. They want to use autoscaling to handle variable traffic. What is the primary challenge they need to address?
Select an answer first
18expert · hard
A company is designing an NGFW deployment in GCP for high resilience. They have a requirement to maintain a predictable baseline performance for a critical application, but they also want to handle occasional traffic spikes. They are considering using autoscaling for the NGFW. What is the primary trade-off they need to manage?
Select an answer first
19expert · hard
A company is deploying an NGFW in GCP for a mission-critical application. They have a strict budget and want to minimize cost while ensuring high availability. They also need to inspect traffic between two VPCs. They are considering an active/passive HA pair in a single zone. What is the most significant risk with this design?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.

9.5 Design to GCP NGFW Standards NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Questions 16–19

Which GCP load balancer type is typically used to steer inbound internet traffic to an NGFW for inspection before it reaches backend workloads?

A company is designing an NGFW deployment in GCP for high resilience. They have a requirement to inspect traffic from an external load balancer. They want to use autoscaling to handle variable traffic. What is the primary challenge they need to address?

Keep studying — Public Cloud