Palo Alto NetSec Architect Practice Questions - Palo Alto Networks Certified Network Security Architect Exam

Access More Questions

An architect is designing Zero Trust for a 12,000-employee financial services firm. The CISO insists every workload-to-workload flow be authenticated and authorized. Which Palo Alto Networks design pattern most closely satisfies the Kindervag Zero Trust 'protect surface' model?

Place a single perimeter PA-7080 between the internet and the data center, then permit any-any inside the data center Define each application stack as a protect surface, deploy NGFW segmentation gateways adjacent to each stack, and enforce User-ID + App-ID policy per flow Replace all internal firewalls with VLAN ACLs, since segmentation is a layer-2 concern Trust internal traffic by default and inspect only egress to the internet

Correct Answer:

Define each application stack as a protect surface, deploy NGFW segmentation gateways adjacent to each stack, and enforce User-ID + App-ID policy per flow

Access more questions from this quiz

Continue to Palo Alto NetSec Architect Practice Questions - Palo Alto Networks Certified Network Security Architect Exam for more practice questions and the full quiz experience.

Access More Questions