NetSec-Pro Practice Questions

When migrating from aperpetual VM-Series firewall license to a flexible VM licensing model, two critical steps are needed:

Allocate same number of vCPUs– This ensures that the VM-Series capacity remains consistent and avoids resource bottlenecks.

“When migrating perpetual VM-Series licenses to flexible VM licensing, allocate the same vCPU and memory resources to ensure equivalent performance.”

(Source: VM-Series Flexible Licensing Migration)

Limit to same security services– Flexible licensing requires maintaining the same security services to preserve licensing compliance.

“Ensure that you allow only the same security services on the flexible VM instance as were licensed on the perpetual VM.”

(Source: Flexible Licensing and Service Subscriptions)

Cloud NGFW for AWS can be configured usingPanoramafor centralized management, as well as theAWS management consolefor native integration and configuration.

“You can configure Cloud NGFW for AWS using Panorama for centralized security management, or directly through the AWS management console to deploy and manage security services for your AWS resources.”

(Source: Cloud NGFW for AWS Guide)

To fully manage a firewall from Strata Cloud Manager (SCM), it’s essential to establish trust and ensure reliable connectivity:

Configure NTP and DNS servers

The firewall must have accurate time (NTP) and name resolution (DNS) to securely communicate with SCM and related cloud services.

“To ensure successful management, configure the firewall’s NTP and DNS settings to synchronize time and resolve domain names such as stratacloudmanager.paloaltonetworks.com.”

(Source: SCM Onboarding Requirements)

Install a device certificate

A device certificate authenticates the firewall’s identity when connecting to SCM.

“The device certificate authenticates the firewall to Palo Alto Networks cloud services, including SCM. It’s a fundamental requirement to establish secure connectivity.”

(Source: Device Certificates)

These steps ensuretrust, secure communication, and successful onboarding into SCM.