Palo Alto Networks Network Security Architect - NetSec-Architect Exam Questions

QUESTION NO: 1
A firewall must block known vulnerabilities and exploits in real time. Which security profile is MOST relevant?

QUESTION NO: 2
An organization is in the process of building a network infrastructure that is cloud first. Part of the revised architecture includes Prisma Access as demonstrated in the diagram below. The organization has selected Strata Cloud Manager (SCM) as the management method for Prisma Access and NGFWs deployed at the data center and in public cloud environments. There are 150 NGFWs in place that are used to terminate service connections and segment networks as well as to secure the data center and public cloud resources.

One of the resilience requirements is to provide highly available directory services and authentication for the NGFW and Prisma Access deployment.
Which traffic flow is valid for administrators connecting network equipment over SSH hosted in the data center?

QUESTION NO: 3
You need to ensure consistent threat prevention across all applications. Which approach should you use?

QUESTION NO: 4
You need to ensure compliance reporting and audit visibility for firewall activities. What should you use?

QUESTION NO: 5
A security architect needs to design a log collection architecture for a large organization with hundreds of firewalls distributed across multiple geographic regions. The primary requirement is to ensure that if a single Log Collector in any region fails, logs from the firewalls in that region will automatically be sent to another available Log Collector without manual intervention. What is the recommended Panorama feature to achieve this level of log collection resilience?

QUESTION NO: 6
You must ensure high availability for critical firewall deployments. What configuration should you implement?

QUESTION NO: 7
An organization wants to detect and prevent unknown malware. Which Palo Alto feature should be implemented?