10.6 Evaluate Systems Management Options and Considerations NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In a private cloud deployment of Palo Alto Networks firewalls, which of the following is a systems management option available to administrators?

   • APanorama centralized management
   • BAWS Systems Manager exclusively
   • CCisco DNA Center
   • DVMware vCenter only
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a key consideration when upgrading a Palo Alto Networks firewall in a private cloud?

   • AMinimizing disruption to traffic flow
   • BDisabling all security policies before upgrade
   • CUpgrading all firewalls simultaneously
   • DEnsuring the firewall is powered off during the upgrade
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company runs a pair of Panorama appliances in an HA configuration to manage VM-Series firewalls in a private cloud. They need to upgrade Panorama to a new version. They want to minimize downtime and ensure that if the upgrade fails, they can revert to the previous version. What is the best approach?

   • AUpgrade the passive Panorama first, then fail over to it, and upgrade the active Panorama.
   • BUpgrade the active Panorama first, then the passive Panorama, to ensure the active is current.
   • CUpgrade both Panorama appliances simultaneously to ensure they are on the same version.
   • DTake a snapshot of both Panorama appliances and then upgrade both at the same time.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A large enterprise runs multiple VM-Series firewalls in a private cloud across two data centers. They want to ensure that if one data center fails, the firewalls in the other data center can still be managed. They also want to use a single management interface. What should they implement?

   • AUse a single Panorama instance and rely on the firewalls' local management interfaces if Panorama fails.
   • BDeploy a Panorama pair in active/passive mode, with the passive Panorama in the second data center, and use a virtual IP for Panorama access.
   • CConfigure each firewall with its own management interface and use a network load balancer to distribute management traffic.
   • DUse the firewalls' built-in HA features to create a management cluster that spans data centers.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is a consideration for the management plane of a Palo Alto Networks firewall?

   • AConfiguring the data plane to handle management traffic
   • BEnsuring management access is available even during high data plane load
   • CDisabling logging to improve management performance
   • DAllocating all CPU resources to the management plane
   Reveal Solution Discussion Select an answer first