A company is deploying Cloud NGFW in AWS to protect a VPC. They have a requirement to use a specific security policy that is already defined in Panorama. The team wants to minimize manual configuration. What should they do?

Use Panorama to push the policy to Cloud NGFW

Use a CloudFormation template to define the policy

Recreate the policy manually in Cloud NGFW

Which licensing model is commonly used for VM-Series firewalls deployed in a public cloud environment?

Free license with unlimited features

License tied to the hypervisor host

Subscription-based license with capacity-based pricing

Perpetual license tied to the physical hardware

A security team is deploying AI Runtime Security to protect an AI model served in a Kubernetes cluster. They need to monitor inference requests and detect anomalies. What should they integrate with?

Only the cloud provider's load balancer

Kubernetes API and service mesh

Only the AI model's training data

An organization is provisioning Cloud NGFW in Azure to protect a hub-and-spoke network. They need to ensure that logs are sent to a central SIEM for analysis. What should they configure during onboarding?

Log forwarding to Panorama only

Log forwarding to Azure Monitor

Log forwarding to a local syslog server only

Log forwarding to AWS CloudWatch

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 3Objective 1

3.1 Install the Selected Deployment Option NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 3)

Part of the Integration and Automation domain, which accounts for 20% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

24questions here

5free pages

5concepts

20%of the exam

Questions 11–15

11foundation · easy
Which cloud environment can AI Runtime Security integrate with for monitoring AI applications?
Select an answer first
12expert · hard
A company is deploying Cloud NGFW in AWS to protect a VPC. They have a requirement to use a specific security policy that is already defined in Panorama. The team wants to minimize manual configuration. What should they do?
Select an answer first
13foundation · easy
Which licensing model is commonly used for VM-Series firewalls deployed in a public cloud environment?
Select an answer first
14application · medium
A security team is deploying AI Runtime Security to protect an AI model served in a Kubernetes cluster. They need to monitor inference requests and detect anomalies. What should they integrate with?
Select an answer first
15application · medium
An organization is provisioning Cloud NGFW in Azure to protect a hub-and-spoke network. They need to ensure that logs are sent to a central SIEM for analysis. What should they configure during onboarding?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NEXT-GENERATION-FIREWALL-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.