2.1 Explain the Function of Cloud NGFWs, PA-Series, CN-Series, and VM-Series Firewalls (e.g., Perimeter and Core Security, Zone Security and Segmentation, High Availability [HA], Security and NAT Policy Implementation, Monitoring and Logging) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 1)

Questions 1–5

1. 1expert · medium

   A SOC team is investigating a security incident. They need to determine which security policy allowed a specific traffic flow that resulted in a malware infection. The firewall is a PA-Series device. Which log should they examine?

   • AThreat logs
   • BTraffic logs
   • CConfiguration logs
   • DSystem logs
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company runs a Kubernetes cluster and wants to use CN-Series firewalls to secure traffic between pods. The security team needs to enforce policies based on Kubernetes labels and namespaces. Which CN-Series feature should be used to achieve this?

   • AUse Kubernetes Network Policies to define segmentation.
   • BUse a service mesh like Istio for policy enforcement.
   • CUse standard security policies with IP-based addresses.
   • DUse CN-Series security policies that reference Kubernetes labels and namespaces.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a common deployment scenario for VM-Series firewalls?

   • ASecuring traffic between virtual machines in a private cloud
   • BSecuring containers in a Kubernetes cluster
   • CProtecting a physical data center perimeter
   • DProviding security for a public cloud VPC
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of zone-based security in a firewall?

   • ATo group interfaces and apply security policies based on trust levels
   • BTo assign IP addresses to devices in different segments
   • CTo monitor network performance and bandwidth usage
   • DTo encrypt traffic between different network segments
   Reveal Solution Discussion Select an answer first
6. 5expert · medium

   A company runs a VM-Series firewall in a private cloud environment. The firewall is configured in active/passive HA with another VM-Series instance. The security team wants to ensure that if the active firewall fails, the passive firewall takes over without dropping existing sessions. What must be configured?

   • AConfigure the HA pair in active/active mode.
   • BConfigure the HA pair to use the same management IP address.
   • CEnable session synchronization on both firewalls.
   • DUse a load balancer to distribute traffic between the two firewalls.
   Reveal Solution Discussion Select an answer first