Palo Alto NetworksCertified Network Security Architect
Domain 9Objective 1
9.1 Explain NGFW Standard Integrations, Including AWS, Azure, GCP, and OCI NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)
Part of the Public Cloud domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.
19questions here
4free pages
4concepts
11%of the exam
Questions 6–10
- 6
Which GCP service is used to automate the deployment of Palo Alto Networks NGFW instances in a standard integration?
Select an answer first - 7
A company has a Palo Alto Networks NGFW deployed in AWS and another in GCP. They want to centrally manage both firewalls from a single console and push consistent security policies. The security team also wants to view traffic logs from both environments in one place. Which Palo Alto Networks solution should the architect use?
Select an answer first - 8
A company is deploying a Palo Alto Networks NGFW in AWS to inspect traffic between two VPCs that are peered. They also have an Azure environment and want to use the same firewall management platform. The security team requires that the firewall can automatically discover new subnets added to the AWS VPCs and update its security policy without manual intervention. Which AWS native integration should the architect configure on the NGFW to meet this requirement?
Select an answer first - 9
An organization is deploying a Palo Alto Networks NGFW in OCI to secure traffic between their on-premises network (connected via IPSec VPN) and their OCI VCN. They want to use OCI's native load balancing service to distribute traffic across multiple NGFW instances. Which OCI integration should the architect configure?
Select an answer first - 10
A company has a Palo Alto Networks NGFW deployed in OCI and another in Azure. They want to use a single Panorama to manage both firewalls. The security team requires that the firewalls receive policy updates from Panorama. Which configuration should the architect implement on the firewalls?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.