10.6 Evaluate Systems Management Options and Considerations NETWORK-SECURITY-ARCHITECT Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a common method to ensure high availability for management services on Palo Alto Networks firewalls?

   • AConfiguring the firewall to reboot automatically
   • BUsing a single firewall with no redundancy
   • CDeploying firewalls in an active/passive HA pair
   • DDisabling the management interface
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which authentication mechanism can be used to centralize administrator authentication for Palo Alto Networks firewalls?

   • ALocal database only
   • BRADIUS
   • CWPA2-PSK
   • DMAC address filtering
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which practice helps minimize disruption during firewall maintenance?

   • APerforming maintenance without prior planning
   • BPerforming maintenance during a scheduled maintenance window
   • CSkipping configuration backups before maintenance
   • DUpgrading all firewalls at the same time
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a redundancy consideration for management services in a private cloud?

   • AHaving redundant management paths to the firewall
   • BUsing a single management interface for simplicity
   • CDisabling failover to reduce complexity
   • DPlacing the management interface on the data plane
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A healthcare organization runs VM-Series firewalls in a private cloud. They need to comply with HIPAA, which requires that all administrative access be authenticated and authorized. They want to use multi-factor authentication (MFA) for all firewall administrators. What should they configure?

   • AEnable RADIUS authentication on the firewalls and integrate with an MFA-capable RADIUS server.
   • BEnable SSH key-based authentication for CLI access, and disable password authentication.
   • CConfigure the firewalls to use LDAP for authentication and rely on the directory service's password policies.
   • DUse local accounts with strong passwords and enforce password complexity policies.
   Reveal Solution Discussion Select an answer first