10.6 Evaluate Systems Management Options and Considerations NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a valid method for managing a Palo Alto Networks firewall in a private cloud?

   • AUsing the vSphere client to manage firewall rules
   • BUsing the Hyper-V Manager console
   • CUsing the firewall's built-in web interface
   • DUsing the Azure Portal to configure security policies
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When managing the management plane of a Palo Alto Networks firewall in a private cloud, which of the following is a key consideration?

   • AMinimizing the number of management interfaces
   • BMaximizing data plane throughput
   • CIsolating management traffic from data traffic
   • DEnsuring the management plane has the highest CPU priority
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company runs VM-Series firewalls in a private cloud and wants to send logs to a SIEM. They have a high volume of traffic and are concerned about the impact of log forwarding on firewall performance. They also need to ensure that logs are not lost if the SIEM is unavailable. What should they do?

   • AIncrease the dataplane resources on the firewalls to handle the log forwarding overhead.
   • BConfigure the firewalls to send logs directly to the SIEM using syslog, and enable buffering on the firewall.
   • CUse the firewall's built-in log storage and have the SIEM pull logs from the firewall periodically.
   • DUse Panorama to collect logs from the firewalls and forward them to the SIEM, with Panorama configured to queue logs if the SIEM is down.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company runs VM-Series firewalls in a private cloud on VMware vSphere. The security team wants to manage the firewalls through a central interface, but the management network is isolated from the data center network. They need to ensure that management traffic is encrypted and that administrators can authenticate using the company's existing Active Directory. Which management approach should they use?

   • AEnable SNMP on each firewall and use a network management system to push configuration changes, with community strings for authentication.
   • BUse the firewall's built-in web interface on each device, accessed via a jump host in the management network, and create separate local admin accounts.
   • CConfigure each firewall's management interface with a public IP and enable SSH for CLI access, using local accounts for authentication.
   • DDeploy Panorama in the management network and connect it to the firewalls over the isolated network, using LDAP for administrator authentication.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a secure method for accessing the management interface of a Palo Alto Networks firewall?

   • ATelnet
   • BHTTP (unencrypted)
   • CFTP (File Transfer Protocol)
   • DSSH (Secure Shell)
   Reveal Solution Discussion Select an answer first