6.1 Explain the Configuration and Maintenance of Network Security for On-Premises, Cloud, and Hybrid Networks (e.g., Network Segmentation, Policies, Monitoring and Logging, Certificates) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 4)

Questions 16–17

1. 16application · medium

   A company uses a Palo Alto Networks firewall to decrypt and inspect outbound SSL traffic. The firewall's certificate for SSL decryption is about to expire. What is the impact if the certificate expires and is not renewed?

   • AThe firewall will switch to a pass-through mode and stop inspecting SSL traffic, but users will not notice any change.
   • BThe firewall will stop decrypting SSL traffic, and users may see certificate errors or connection failures for HTTPS sites.
   • CThe firewall will continue to decrypt traffic but will not log the decrypted content.
   • DThe firewall will automatically generate a new self-signed certificate and continue decrypting traffic without interruption.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In a cloud environment, which of the following is a common method for implementing network segmentation?

   • AUsing a single large subnet for all cloud resources
   • BConfiguring virtual networks and subnets with security groups
   • CDisabling all network access to the cloud resources
   • DInstalling physical network cables to separate cloud servers
   Reveal Solution Discussion Select an answer first