2.1 Explain the Function of Cloud NGFWs, PA-Series, CN-Series, and VM-Series Firewalls (e.g., Perimeter and Core Security, Zone Security and Segmentation, High Availability [HA], Security and NAT Policy Implementation, Monitoring and Logging) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the primary purpose of a firewall at the network perimeter?

   • ATo inspect and control traffic entering and leaving the network
   • BTo encrypt all data stored on internal servers
   • CTo replace the need for endpoint security software
   • DTo manage user identities and access permissions
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   A security team is deploying a Palo Alto Networks Cloud NGFW to protect workloads in a public cloud environment. Which capability is a primary function of a Cloud NGFW?

   • AProviding only basic IP address filtering without application-level inspection
   • BProviding centralized management and consistent security policies across multiple cloud accounts and VPCs
   • CActing as a physical firewall appliance that must be installed in the cloud provider's data center
   • DReplacing the cloud provider's native security groups and network ACLs entirely
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security operations center (SOC) uses Panorama to manage multiple PA-Series firewalls. The SOC needs to generate a report showing which users are accessing which websites and whether any threats were blocked. Which logging and reporting feature should be used?

   • AConfigure the firewalls to send traffic logs to Panorama and use Panorama's reporting tools.
   • BConfigure syslog forwarding to a third-party SIEM and use its reporting.
   • CEnable SNMP on the firewalls and use an SNMP-based reporting tool.
   • DUse the firewall's built-in packet capture feature.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A large enterprise is designing its network security architecture. They need a firewall that can handle high-throughput traffic inspection at the core of the network, support multiple 10GbE interfaces, and provide advanced threat prevention features. The firewall will be placed between the core switch and the internet edge. Which firewall type is best suited for this role?

   • ACN-Series firewall
   • BVM-Series firewall
   • CCloud NGFW
   • DPA-Series firewall
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company is using Cloud NGFW for AWS to protect its VPCs. The security team wants to ensure that all security policies are consistently applied across multiple VPCs and that any changes are centrally managed. Which feature of Cloud NGFW should be used?

   • AUse AWS Security Groups to enforce policies.
   • BUse AWS Network Firewall and import policies from Panorama.
   • CConfigure policies directly on each Cloud NGFW instance.
   • DUse Panorama to manage Cloud NGFW policies centrally.
   Reveal Solution Discussion Select an answer first