A security team is deploying VM-Series firewalls in AWS to protect a VPC. They need to automate the initial configuration and ensure the firewall can be managed centrally. Which deployment method should they use?

Deploy from AWS Marketplace with a CloudFormation template

Install VM-Series on a VMware ESXi host

Use Azure Resource Manager templates

Manually create an EC2 instance from a custom AMI

What is the primary integration point for CN-Series firewalls within a Kubernetes cluster?

Container Network Interface (CNI)

A network engineer is deploying a PA-Series firewall in a data center that also hosts a VM-Series firewall for a DMZ. The PA-Series will handle core traffic, and the VM-Series will handle DMZ traffic. The team wants to manage both from Panorama and ensure high availability for the PA-Series. What should they do?

Use only the VM-Series for all traffic

Configure the PA-Series in HA and register both firewalls with Panorama

Use only the PA-Series for all traffic

Configure the VM-Series in HA and register only the PA-Series with Panorama

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 3Objective 1

3.1 Install the Selected Deployment Option NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 1)

Part of the Integration and Automation domain, which accounts for 20% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

24questions here

5free pages

5concepts

20%of the exam

Questions 1–5

1application · medium
A security team is deploying VM-Series firewalls in AWS to protect a VPC. They need to automate the initial configuration and ensure the firewall can be managed centrally. Which deployment method should they use?
Select an answer first
2foundation · easy
Which component is used to forward logs from Cloud NGFW to a central logging system?
Select an answer first
3foundation · easy
What is the primary integration point for CN-Series firewalls within a Kubernetes cluster?
Select an answer first
4foundation · easy
Which public cloud provider is supported for deploying Palo Alto Networks Cloud NGFW?
Select an answer first
5expert · hard
A network engineer is deploying a PA-Series firewall in a data center that also hosts a VM-Series firewall for a DMZ. The PA-Series will handle core traffic, and the VM-Series will handle DMZ traffic. The team wants to manage both from Panorama and ensure high availability for the PA-Series. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NEXT-GENERATION-FIREWALL-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.

3.1 Install the Selected Deployment Option NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 1)

Questions 1–5

A security team is deploying VM-Series firewalls in AWS to protect a VPC. They need to automate the initial configuration and ensure the firewall can be managed centrally. Which deployment method should they use?

Which component is used to forward logs from Cloud NGFW to a central logging system?

What is the primary integration point for CN-Series firewalls within a Kubernetes cluster?

Which public cloud provider is supported for deploying Palo Alto Networks Cloud NGFW?

Keep studying — Integration and Automation