A company is choosing between Prisma SD-WAN and PAN-OS SD-WAN for IoT visibility. They need deep packet inspection for IoT protocols and also want to integrate with their existing on-premises NGFW infrastructure. Which solution is more appropriate?

Both provide identical deep packet inspection capabilities.

Neither provides deep packet inspection.

Prisma SD-WAN, because it is cloud-managed and provides deep packet inspection.

PAN-OS SD-WAN, because it runs on the NGFW and provides deep packet inspection.

A company uses PAN-OS SD-WAN in its NGFWs to connect remote sites. The network team needs to monitor IoT device traffic and identify potential anomalies. Which PAN-OS SD-WAN feature provides this visibility?

The firewall's URL filtering logs.

The built-in packet capture feature on the NGFW.

The globalProtect portal's user activity logs.

The SD-WAN plugin's device and traffic monitoring dashboards.

What type of information does an NGFW's visibility feature provide about IoT devices?

The physical location of each device

Only the IP addresses of IoT devices

Device type, operating system, and application usage

The MAC address and the user's email

A network administrator needs to identify and monitor IoT devices on the network. Which NGFW capability directly provides this visibility?

Application identification and device fingerprinting

A large enterprise has NGFWs in multiple regions and wants to use virtual metadata collectors to aggregate IoT metadata. They have limited WAN bandwidth and need to prioritize which metadata to send to the central analysis platform. What is the best approach?

Disable metadata collection for low-priority devices.

Use a single collector for all regions to simplify management.

Configure the virtual metadata collectors to filter and prioritize metadata based on device risk and criticality.

Send all metadata without filtering to ensure no data is missed.

Palo Alto NetworksCertified Network Security Architect

Domain 8Objective 3

8.3 Explain Visibility Functionality (e.g., NGFW, Virtual Metadata Collector, Prisma SD-WAN, PAN-OS SD-WAN) NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Part of the Securing IoT Environments domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.

23questions here

5free pages

4concepts

11%of the exam

Questions 6–10

6expert · hard
A company is choosing between Prisma SD-WAN and PAN-OS SD-WAN for IoT visibility. They need deep packet inspection for IoT protocols and also want to integrate with their existing on-premises NGFW infrastructure. Which solution is more appropriate?
Select an answer first
7application · medium
A company uses PAN-OS SD-WAN in its NGFWs to connect remote sites. The network team needs to monitor IoT device traffic and identify potential anomalies. Which PAN-OS SD-WAN feature provides this visibility?
Select an answer first
8foundation · easy
What type of information does an NGFW's visibility feature provide about IoT devices?
Select an answer first
9foundation · easy
A network administrator needs to identify and monitor IoT devices on the network. Which NGFW capability directly provides this visibility?
Select an answer first
10expert · hard
A large enterprise has NGFWs in multiple regions and wants to use virtual metadata collectors to aggregate IoT metadata. They have limited WAN bandwidth and need to prioritize which metadata to send to the central analysis platform. What is the best approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.