10.7 Evaluate New Hardware Deployment Trending and Scoping NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A university is deploying a new PA-5450 pair to inspect 40 Gbps of inter-building traffic. The existing data center has redundant 30A/208V PDUs, but each PDU is already at 80% load. The cooling system has 20% spare capacity. The network team insists on deploying both firewalls in the same rack for low-latency links. What is the most appropriate action?

   • AInstall the firewalls in separate racks with dedicated power circuits to balance load and ensure redundancy.
   • BUse VM-Series firewalls on existing servers instead of physical hardware.
   • CProceed with the deployment, assuming the PDUs have enough headroom for the firewalls' draw.
   • DReduce the inspection throughput to 20 Gbps to lower power consumption.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A managed security service provider (MSSP) is refreshing its firewall fleet across 200 small customer sites. Each site needs 500 Mbps of firewall throughput, 10,000 sessions, and supports a mix of VPN and threat prevention. The MSSP wants to reduce physical footprint and power consumption while maintaining centralized management. Which hardware deployment trend best aligns with this requirement?

   • AVirtualizing all firewalls on a single hypervisor at a central data center.
   • BUsing compact, high-performance models like the PA-440 series at each site.
   • CDeploying high-end chassis firewalls at each site to allow future expansion.
   • DSelecting the largest model available to ensure headroom for all customers.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What should be verified before installing a new firewall to ensure network integration?

   • AThat the firewall's power supply is rated for the local voltage
   • BThat the firewall's serial number is registered with the manufacturer
   • CThat the required network interfaces and cabling are available and properly connected
   • DThat the firewall's default hostname is unique across the organization
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of using the Palo Alto Networks sizing tools or datasheets when scoping a new hardware deployment?

   • ATo calculate the exact power consumption for the entire data center
   • BTo identify the software features that are not supported on any hardware model
   • CTo determine which model can meet the required throughput, session, and feature specifications
   • DTo compare the physical dimensions of different models for rack planning
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A university is deploying a PA-5450 in its main data center. The data center has a raised floor with limited underfloor cooling. The firewall will be placed in a rack that already contains high-density servers. What is the most important consideration for this deployment?

   • AEnsuring adequate airflow and cooling for the firewall, given the existing high-density equipment.
   • BVerifying that the firewall's management port is accessible.
   • CConfirming that the firewall supports the university's authentication protocol.
   • DChecking that the firewall's software version is the latest.
   Reveal Solution Discussion Select an answer first