NetSec-Architect Practice Question: Centralized Management And Security Automation AT Scale
An architect is designing a high-scale security automation framework using Strata Cloud Manager and Cortex XSOAR. Which THREE architectural best practices should be implemented to ensure reliable, scalable API-driven policy and threat management? (Choose three)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Incorporate robust error handling, token caching, and exponential backoff retry mechanisms in automation scripts to manage API rate limits.
Best practices for API automation at scale include using asynchronous API calls for long tasks, leveraging EDLs for rapid blocklisting, and implementing robust error handling and rate-limiting.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Incorporate robust error handling, token caching, and exponential backoff retry mechanisms in automation scripts to manage API rate limits.
Why this is correct
Handling rate limits and caching authentication tokens ensures scripts remain stable and resilient.
- ✓
Leverage External Dynamic Lists (EDLs) for high-frequency indicator updates instead of programmatically modifying security policy rules via API calls.
Why this is correct
Using EDLs avoids commit storms and rate limits by having firewalls poll an external list rather than updating rules directly via API.
- ✗
Route all API traffic through unencrypted HTTP connections to eliminate cryptographic overhead.
Why it's wrong here
PAN-OS APIs enforce HTTPS; unencrypted HTTP is not supported for management traffic.
- ✗
Disable SSL/TLS certificate verification globally in all API client scripts to maximize connection speed.
Why it's wrong here
Disabling SSL verification introduces severe security vulnerabilities (Man-in-the-Middle attacks) and is a bad practice.
- ✓
Implement asynchronous API task handling and status polling for long-running operations such as large report generation or bulk software pushes.
Why this is correct
Asynchronous job queues prevent API timeouts during heavy processing tasks.
About these practice questions
One of 228 original NetSec-Architect practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This NetSec-Architect practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NetSec-Architect exam.