8.3 Explain Visibility Functionality (e.g., NGFW, Virtual Metadata Collector, Prisma SD-WAN, PAN-OS SD-WAN) NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security architect is designing IoT visibility for a smart factory. They need to identify IoT devices and monitor their traffic, but they also need to ensure that the visibility solution can scale to thousands of devices without impacting performance. What is the best approach?

   • AUse a single NGFW to inspect all traffic and collect metadata.
   • BUse a passive tap and a single collector.
   • CUse NGFWs with IoT security subscription and deploy multiple virtual metadata collectors to distribute the load.
   • DDisable IoT visibility to avoid performance impact.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A manufacturing company has multiple NGFWs protecting different plant networks. They want to centralize IoT device metadata for analysis and reporting. What is the role of a virtual metadata collector in this environment?

   • AIt replaces the NGFW's firewall function to improve performance.
   • BIt stores raw packet captures for forensic analysis.
   • CIt provides a direct internet connection for IoT devices.
   • DIt aggregates IoT metadata from multiple NGFWs and forwards it to a central analysis platform.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A hospital IT team wants to identify and monitor all IoT devices on its network, including those that use non-standard protocols. They have an NGFW deployed at the network edge and need to extend visibility into device behavior. What should they implement to gain the most comprehensive device identification and behavioral monitoring?

   • AEnable only the NGFW's application identification feature without any additional configuration.
   • BDeploy a separate network tap and use a third-party packet analyzer for all traffic.
   • CEnable the NGFW's IoT security subscription and configure a virtual metadata collector to aggregate device metadata.
   • DConfigure the NGFW to log all traffic and manually review logs for IoT devices.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security architect is designing IoT visibility for a hospital. They need to identify IoT devices and monitor their behavior, but they also need to ensure that the visibility solution does not introduce latency for critical medical device traffic. What is the best approach?

   • ADeploy a passive tap on the network to monitor all traffic without affecting performance.
   • BEnable full packet capture on all traffic to ensure complete visibility.
   • CUse a separate IDS that inspects all traffic in-line.
   • DUse the NGFW's IoT security subscription with a virtual metadata collector, and configure the NGFW to inspect only IoT device traffic.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A logistics company uses PAN-OS SD-WAN to connect its warehouses. The security team wants to identify IoT devices (e.g., barcode scanners, temperature sensors) and monitor their traffic for unusual patterns. Which PAN-OS SD-WAN capability directly supports this?

   • AThe VPN concentrator's session logs.
   • BThe DNS proxy's query logs.
   • CThe firewall's anti-virus scanning of all traffic.
   • DThe SD-WAN plugin's application and device identification features.
   Reveal Solution Discussion Select an answer first