NetSec-Architect 무료 덤프문제 온라인 액세스

An organization wants to detect and prevent unknown malware. Which Palo Alto feature should be implemented?

• A.Antivirus only
• B.NAT
• C.Routing
• D.WildFire

You must ensure high availability for critical firewall deployments. What configuration should you implement?

• A.Active/Passive HA
• B.Manual failover
• C.Static routing only
• D.Single firewall

A company requires segmentation between development, testing, and production environments.
What is the BEST design?

• A.Separate zones with security policies
• B.VLAN only
• C.Static routes
• D.Same zone for all

An architect is designing a security solution for a large AWS environment with numerous application virtual private clouds (VPCs). These applications have diverse and sometimes conflicting inbound security requirements, making a single, unified ruleset challenging to create and maintain. The solution must secure inbound traffic for different application groups while also centrally securing all outbound and east-west traffic via an AWS Transit Gateway. Which design model recommendation will simplify rule complexity for inbound traffic while meeting all security requirements?

• A.Combined model using dedicated inbound NGFWs for logical application groups and a central NGFW for east-west and outbound traffic
• B.Centralized model to consolidating all security functions by directing all inbound, outbound, and east-west traffic through a single, shared security VPC
• C.Transit Gateway model focused on establishing connectivity by creating a full mesh of direct peering connections between all application VPCs
• D.Isolated model deploying a separate non-connected security VPC for each application VPC

A company experiences lateral movement attacks within the internal network. Which feature helps mitigate this risk?

• A.Internal segmentation with NGFW
• B.QoS policies
• C.NAT rules
• D.Static routes