A university has multiple NGFWs protecting different departments. They want to analyze IoT device behavior across the entire campus. What is the best way to aggregate metadata for this analysis?

Enable NetFlow on each NGFW and analyze flows separately.

Deploy a virtual metadata collector to aggregate metadata from all NGFWs.

Use a single NGFW to inspect all traffic.

Collect logs manually from each NGFW.

A retail chain with multiple branch offices uses Prisma SD-WAN to connect its locations. The security team wants to gain visibility into IoT devices (e.g., smart cameras, sensors) and their application traffic across the WAN. What is the most effective way to achieve this?

Deploy an NGFW at each branch and manually correlate logs from each device.

Enable NetFlow on the WAN links and analyze flows with an external tool.

Configure SNMP monitoring on each branch router to track device traffic.

Use Prisma SD-WAN's built-in analytics to view IoT device and application traffic per branch.

A large enterprise has NGFWs deployed across multiple regions. They want to use a virtual metadata collector to aggregate IoT metadata, but they have concerns about data residency and want to minimize the amount of data sent to a central location. What is the best approach?

Use a single NGFW to inspect all traffic and collect metadata.

Send all raw metadata to a single central collector.

Disable metadata collection to avoid compliance issues.

Deploy regional virtual metadata collectors that aggregate and filter metadata before sending summaries to the central platform.

Palo Alto NetworksCertified Network Security Architect

Domain 8Objective 3

8.3 Explain Visibility Functionality (e.g., NGFW, Virtual Metadata Collector, Prisma SD-WAN, PAN-OS SD-WAN) NETWORK-SECURITY-ARCHITECT Practice Questions (Page 5)

Part of the Securing IoT Environments domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.

23questions here

5free pages

4concepts

11%of the exam

Questions 21–23

21application · medium
A university has multiple NGFWs protecting different departments. They want to analyze IoT device behavior across the entire campus. What is the best way to aggregate metadata for this analysis?
Select an answer first
22application · medium
A retail chain with multiple branch offices uses Prisma SD-WAN to connect its locations. The security team wants to gain visibility into IoT devices (e.g., smart cameras, sensors) and their application traffic across the WAN. What is the most effective way to achieve this?
Select an answer first
23expert · hard
A large enterprise has NGFWs deployed across multiple regions. They want to use a virtual metadata collector to aggregate IoT metadata, but they have concerns about data residency and want to minimize the amount of data sent to a central location. What is the best approach?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.

8.3 Explain Visibility Functionality (e.g., NGFW, Virtual Metadata Collector, Prisma SD-WAN, PAN-OS SD-WAN) NETWORK-SECURITY-ARCHITECT Practice Questions (Page 5)

Questions 21–23

A university has multiple NGFWs protecting different departments. They want to analyze IoT device behavior across the entire campus. What is the best way to aggregate metadata for this analysis?

A retail chain with multiple branch offices uses Prisma SD-WAN to connect its locations. The security team wants to gain visibility into IoT devices (e.g., smart cameras, sensors) and their application traffic across the WAN. What is the most effective way to achieve this?

A large enterprise has NGFWs deployed across multiple regions. They want to use a virtual metadata collector to aggregate IoT metadata, but they have concerns about data residency and want to minimize the amount of data sent to a central location. What is the best approach?

Keep studying — Securing IoT Environments