Palo Alto NetSec Architect Practice Questions - Palo Alto Networks Certified Network Security Architect Exam

Put all three categories in one zone with permit-any, since medical devices cannot enforce policy Enroll medical devices in GlobalProtect to apply Host Information Profile checks Place medical devices in their own zone behind an NGFW segmentation gateway, identify devices via IoT Security (subscription), and write App-ID + device-attribute rules permitting only required EHR flows Disable security policy for medical devices because they are critical and downtime is unacceptable