Palo Alto Networks Exam NetSec-Generalist Topic 6 Question 3 Discussion

Actual exam question for Palo Alto Networks's NetSec-Generalist exam

Question #: 3
Topic #: 6

Which network design for internet of things (loT) Security allows traffic mirroring from the switch to a TAP interface on the firewall to monitor traffic not otherwise seen?

ADHCP server on firewall

BFirewall as DHCP relay

CFirewall in DHCP path

DFirewall outside DHCP path

Show Suggested Answer

Suggested Answer: D

by Curt at Feb 09, 2025, 08:08 PM

Limited Time Offer

25%

Off

Get Premium NetSec-Generalist Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Valentine

29 days ago

Firewall outside DHCP path? What is this, a spy thriller? I just want my IoT devices to work, is that too much to ask?

upvoted 0 times

...

Martha

1 months ago

Wow, this is a tough one. I was going to go with A, but now I'm not so sure. Guess I'll have to do some more research.

upvoted 0 times

Ligia

4 days ago

I'm not sure either, but I think C) Firewall in DHCP path makes sense.

upvoted 0 times

...

Albert

7 days ago

I'm leaning towards B) Firewall as DHCP relay.

upvoted 0 times

...

Danica

17 days ago

I think the answer is D) Firewall outside DHCP path.

upvoted 0 times

...

Zita

1 months ago

Option D is the clear winner here. It's the only one that specifically mentions traffic mirroring, which is crucial for IoT security.

upvoted 0 times

...

Dorsey

1 months ago

Hmm, I'm torn between B and D. Both seem to offer some level of security, but D might be the more robust solution.

upvoted 0 times

Mauricio

19 days ago

I agree, D would provide more robust security for IoT devices.

upvoted 0 times

...

Merilyn

20 days ago

I think D is the better option for security.

upvoted 0 times

...

Milly

2 months ago

I'm not sure, but I think C) Firewall in DHCP path could also work for traffic monitoring.

upvoted 0 times

...

Brinda

2 months ago

I think option C is the way to go. Firewall in DHCP path ensures all traffic is inspected before reaching the IoT devices.

upvoted 0 times

...

Ronna

2 months ago

Definitely option D. Firewall outside DHCP path allows traffic mirroring for IoT security monitoring.

upvoted 0 times

Afton

14 days ago

I always make sure to set up the network design with that in mind.

upvoted 0 times

...

Willodean

22 days ago

It definitely helps with security for IoT devices.

upvoted 0 times

...

Aimee

26 days ago

Agreed, having the firewall outside the DHCP path is crucial for monitoring traffic.

upvoted 0 times

...

Jina

28 days ago

I think option D is the best choice.

upvoted 0 times

...

Alesia

2 months ago

I agree with Rachael, because having the firewall outside the DHCP path allows for better monitoring of traffic.

upvoted 0 times

...

Rachael

2 months ago

I think the answer is D) Firewall outside DHCP path.

upvoted 0 times

...