最新のNCP-NS問題集で試験を準備する

Refer to the exhibit.

An organization uses an FNS-NG Service Chain to steer application traffic through a pair of third-party firewall Network Function VMs operating in Active/Standby mode. Users suddenly report that all application access is blocked. The administrator reviews Prism Central -> Network & Security -> Network Functions, where the summary shown in the exhibit is displayed. Additional information: Alert: "Network Function 'PANW Service Insertion' virtual NIC pair(s) are unhealthy." Both firewall VMs are powered on and reachable. The security policy using the service chain has not been changed. Based on the exhibit and findings, what is the most likely cause of the traffic outage?

• A. The service-chain health check failed to reroute sessions to the healthy firewall.
• B. Firewall policy synchronization was not configured when the standby firewall became active.
• C. The inbound vNIC on SE-PA-VM Firewall-2 failed, preventing redirected packets from reaching the firewall.
• D. One of the Network Function vNIC pairs lost dataplane connectivity, interrupting traffic until health is stabilized.

When setting up a Network Function VM for Service Insertion, an administrator needs to configure the vNICs that will be used for redirecting traffic.
What is the correct configuration for the vNICs on the Network Function VM?

• A. Two standard vNICs are required, one for ingress and one for egress and must be on a trunked VLAN.
• B. Two Network Function vNICs are required that must be assigned static IP addresses from a managed IPAM network.
• C. Two specific Network Function vNICs must be created, one for inbound traffic and the other for outbound traffic.
• D. A single vNIC of type Network Function is required, which handles both ingress and egress traffic.

An administrator receives a ticket reporting unwanted traffic between production and development servers. The administrator reviews the Flow Network Security logs and finds the following:

How can the administrator resolve the issue?

• A. Enable the Network Controller for the policy
• B. Move the servers to separate IP subnets.
• C. Change the enforcement mode for the policy
• D. Update the policy to disallow the unwanted traffic.

An administrator is designing a Transit VPC to provide shared corporate services (e.g., DNS) for two tenant VPCs:
VPC-A requires WAN access using NAT.
VPC-B requires WAN access without NAT.
Both VPCs connect to the Transit VPC for shared services hosted on the corporate network.
Shared services residing in the Transit VPC use routed IP addressing for WAN connectivity.
Which two configuration elements should the administrator implement on the Transit VPC? (Choose two.)

• A. Associate one No-NAT external VLAN to the Transit VPC router for underlay connectivity.
• B. Associate both a NAT and a No-NAT external VLAN to the Transit VPC to support separate egress paths.
• C. Use one Overlay external subnet in the Transit VPC to which both VPCs will connect.
• D. Create two Overlay external subnets in the Transit VPC: one for VPC-A and one for VPC-

Flow Network Security Next-Gen is supported in which two environments? (Choose two.)

• A. NC2 Overlay Networks
• B. On-Premises VLAN Basic Networks
• C. NC2 VLAN Networks
• D. On-Premises Overlay Networks