Palo Alto NetSec Architect Practice Questions - Palo Alto Networks Certified Network Security Architect Exam

Access More Questions

A retail enterprise must enforce least-privilege access between its PCI cardholder data environment (CDE) and corporate workloads. Which combination best supports a Zero Trust segmentation strategy with PCI-DSS scope reduction?

Same Layer 3 subnet, host-based firewall only Dedicated PA-Series HA pair as a segmentation gateway between CDE and corporate, with App-ID, User-ID, and decryption enabled, plus separate device group in Panorama VLAN trunk to a single shared firewall with permit-any policy Place CDE workloads on the public internet behind GlobalProtect

Correct Answer:

Dedicated PA-Series HA pair as a segmentation gateway between CDE and corporate, with App-ID, User-ID, and decryption enabled, plus separate device group in Panorama

Access more questions from this quiz

Continue to Palo Alto NetSec Architect Practice Questions - Palo Alto Networks Certified Network Security Architect Exam for more practice questions and the full quiz experience.

Access More Questions