Palo Alto Networks Exam NetSec-Generalist Topic 6 Question 3 Discussion

Actual exam question for Palo Alto Networks's NetSec-Generalist exam

Question #: 3
Topic #: 6

Which network design for internet of things (loT) Security allows traffic mirroring from the switch to a TAP interface on the firewall to monitor traffic not otherwise seen?

ADHCP server on firewall

BFirewall as DHCP relay

CFirewall in DHCP path

DFirewall outside DHCP path

Show Suggested Answer

Suggested Answer: D

by Curt at Feb 09, 2025, 08:08 PM

Limited Time Offer

25%

Off

Get Premium NetSec-Generalist Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Valentine

4 months ago

Firewall outside DHCP path? What is this, a spy thriller? I just want my IoT devices to work, is that too much to ask?

upvoted 0 times

...

Martha

4 months ago

Wow, this is a tough one. I was going to go with A, but now I'm not so sure. Guess I'll have to do some more research.

upvoted 0 times

Margurite

3 months ago

Let's do some more research before making a final decision.

upvoted 0 times

...

Ligia

3 months ago

I'm not sure either, but I think C) Firewall in DHCP path makes sense.

upvoted 0 times

...

Albert

3 months ago

I'm leaning towards B) Firewall as DHCP relay.

upvoted 0 times

...

Danica

4 months ago

I think the answer is D) Firewall outside DHCP path.

upvoted 0 times

...

Zita

4 months ago

Option D is the clear winner here. It's the only one that specifically mentions traffic mirroring, which is crucial for IoT security.

upvoted 0 times

...

Dorsey

4 months ago

Hmm, I'm torn between B and D. Both seem to offer some level of security, but D might be the more robust solution.

upvoted 0 times

Mauricio

4 months ago

I agree, D would provide more robust security for IoT devices.

upvoted 0 times

...

Merilyn

4 months ago

I think D is the better option for security.

upvoted 0 times

...

Milly

5 months ago

I'm not sure, but I think C) Firewall in DHCP path could also work for traffic monitoring.

upvoted 0 times

...

Brinda

5 months ago

I think option C is the way to go. Firewall in DHCP path ensures all traffic is inspected before reaching the IoT devices.

upvoted 0 times

...

Ronna

5 months ago

Definitely option D. Firewall outside DHCP path allows traffic mirroring for IoT security monitoring.

upvoted 0 times

Afton

3 months ago

I always make sure to set up the network design with that in mind.

upvoted 0 times

...

Willodean

4 months ago

It definitely helps with security for IoT devices.

upvoted 0 times

...

Aimee

4 months ago

Agreed, having the firewall outside the DHCP path is crucial for monitoring traffic.

upvoted 0 times

...

Jina

4 months ago

I think option D is the best choice.

upvoted 0 times

...

Alesia

5 months ago

I agree with Rachael, because having the firewall outside the DHCP path allows for better monitoring of traffic.

upvoted 0 times

...

Rachael

5 months ago

I think the answer is D) Firewall outside DHCP path.

upvoted 0 times

...