A DevOps team is deploying CN-Series in a Kubernetes cluster that also runs AI workloads. They need to secure both east-west traffic and AI inference requests. The cluster is managed by a cloud provider, and the team wants to minimize custom integrations. What should they do?

Deploy CN-Series and AI Runtime Security separately

Deploy only AI Runtime Security

An organization is deploying Cloud NGFW in AWS to protect a VPC. They need to ensure that the firewall can be managed by Panorama and that logs are sent to S3. What should they configure during onboarding?

Azure Monitor for management and logs

Local management only and no log forwarding

Panorama as the management plane and S3 as the log destination

AWS Systems Manager for management and CloudWatch for logs

A company is deploying a PA-Series firewall in a remote office with no local IT staff. The firewall must be managed centrally via Panorama, and the WAN link is a 100 Mbps MPLS circuit. The administrator needs to ensure the firewall can be provisioned without on-site configuration. What should they do?

Ship the firewall with a pre-configured management IP

Deploy a VM-Series firewall instead

Use a USB drive with configuration files

Use Zero Touch Provisioning (ZTP) with Panorama

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 3Objective 1

3.1 Install the Selected Deployment Option NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 4)

Part of the Integration and Automation domain, which accounts for 20% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

24questions here

5free pages

5concepts

20%of the exam

Questions 16–20

16foundation · easy
Which tool is used to install CN-Series container firewalls in a Kubernetes cluster?
Select an answer first
17application · medium
A security engineer is deploying VM-Series in a private cloud using VMware vSphere. They need to ensure the firewall can be managed by Panorama and support dynamic routing. Which licensing model should they select?
Select an answer first
18expert · hard
A DevOps team is deploying CN-Series in a Kubernetes cluster that also runs AI workloads. They need to secure both east-west traffic and AI inference requests. The cluster is managed by a cloud provider, and the team wants to minimize custom integrations. What should they do?
Select an answer first
19application · medium
An organization is deploying Cloud NGFW in AWS to protect a VPC. They need to ensure that the firewall can be managed by Panorama and that logs are sent to S3. What should they configure during onboarding?
Select an answer first
20expert · hard
A company is deploying a PA-Series firewall in a remote office with no local IT staff. The firewall must be managed centrally via Panorama, and the WAN link is a 100 Mbps MPLS circuit. The administrator needs to ensure the firewall can be provisioned without on-site configuration. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NEXT-GENERATION-FIREWALL-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.

3.1 Install the Selected Deployment Option NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 4)

Questions 16–20

Which tool is used to install CN-Series container firewalls in a Kubernetes cluster?

A security engineer is deploying VM-Series in a private cloud using VMware vSphere. They need to ensure the firewall can be managed by Panorama and support dynamic routing. Which licensing model should they select?

A DevOps team is deploying CN-Series in a Kubernetes cluster that also runs AI workloads. They need to secure both east-west traffic and AI inference requests. The cluster is managed by a cloud provider, and the team wants to minimize custom integrations. What should they do?

An organization is deploying Cloud NGFW in AWS to protect a VPC. They need to ensure that the firewall can be managed by Panorama and that logs are sent to S3. What should they configure during onboarding?

Keep studying — Integration and Automation