A Kubernetes administrator is deploying CN-Series to secure a microservices application. They need to ensure that the firewall can enforce policies based on Kubernetes labels. What should they configure during deployment?

External load balancer configuration

Which hardware form factor is typically used for a PA-Series firewall when deploying in a small branch office with limited rack space?

PA-5200 Series rack-mount appliance

PA-400 Series desktop or rack-mount appliance

A DevOps team is deploying CN-Series firewalls in a Kubernetes cluster to secure east-west traffic. They want to use a package manager for installation and need to integrate with Kubernetes RBAC. Which installation method should they use?

Manual YAML manifest deployment

A security architect is choosing between VM-Series and Cloud NGFW for a new AWS deployment. The environment has variable traffic patterns, and the team wants to minimize operational overhead while maintaining centralized policy management. What should they choose?

Cloud NGFW with local management only

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 3Objective 1

3.1 Install the Selected Deployment Option NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 2)

Part of the Integration and Automation domain, which accounts for 20% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

24questions here

5free pages

5concepts

20%of the exam

Questions 6–10

6application · medium
A Kubernetes administrator is deploying CN-Series to secure a microservices application. They need to ensure that the firewall can enforce policies based on Kubernetes labels. What should they configure during deployment?
Select an answer first
7foundation · easy
Which hardware form factor is typically used for a PA-Series firewall when deploying in a small branch office with limited rack space?
Select an answer first
8foundation · easy
Which hypervisor is officially supported for deploying VM-Series firewalls in a private cloud environment?
Select an answer first
9application · medium
A DevOps team is deploying CN-Series firewalls in a Kubernetes cluster to secure east-west traffic. They want to use a package manager for installation and need to integrate with Kubernetes RBAC. Which installation method should they use?
Select an answer first
10expert · hard
A security architect is choosing between VM-Series and Cloud NGFW for a new AWS deployment. The environment has variable traffic patterns, and the team wants to minimize operational overhead while maintaining centralized policy management. What should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NEXT-GENERATION-FIREWALL-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.