Courseiva
Free · No account needed · No credit card

Certified Network Security Architect (NetSec-Architect) Practice Test

272 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.

Instant feedback after each answer
Full explanations included
Domain score breakdown
Pass mark: 860 (scaled 300–1,000)

Sample questions with explanations

This is exactly what you see during practice — question, options, and a full explanation after you answer.

Q1Centralized Management And Security Automation AT Scaleeasy
Full explanation →

An architect is planning a Strata Cloud Manager deployment for a multi-tenant enterprise. Which core architecture principle differentiates Strata Cloud Manager from a traditional on-premises Panorama deployment?

AIt only supports policy management for Prisma Access and cannot manage physical firewalls.
It provides a cloud-native management plane with automated scaling and unified operations across both hardware and SASE architectures.Correct
CIt replaces the need for local firewalls by executing all traffic inspection in the management cloud.
DIt requires local administrators to manually manage database replication across regional instances.

Strata Cloud Manager is Palo Alto Networks' cloud-delivered management plane (SASE-native) that unifies management of Prisma Access, Prisma SD-WAN, and physical/virtual NGFWs. Unlike on-premises Panorama, it provides automated scaling, multi-tenant isolation, and a single pane of…Read full explanation

Q2Centralized Management And Security Automation AT Scalemedium
Full explanation →

An architect is troubleshooting a Panorama deployment where scheduled configuration backups are failing. The administrator notices that the local storage on the Panorama virtual appliance is running low. Where in the Panorama web interface should the architect modify the log and data retention settings to free up storage for backups?

APanorama > Managed Devices > Summary
Panorama > Setup > Management > Logging and Storage SettingsCorrect
CDevice > Setup > Operations
DPanorama > Log Collectors > Collector Group

In Panorama, log and data retention settings that affect local storage (including backups) are configured under 'Panorama > Setup > Management > Logging and Storage Settings'. This is where you can adjust log retention periods, disable logging to Panorama, or change the log stora…Read full explanation

Q3Centralized Management And Security Automation AT Scalehard
Full explanation →

An enterprise is scaling its log collection architecture using Panorama Log Collectors. Due to high log volume, an architect needs to configure Log Forwarding to offload specific system and traffic logs to an external SIEM while maintaining local compliance archives. Which feature should be configured on Panorama to achieve reliable, filtered log forwarding to the external SIEM?

AModify the Syslog Server profile under Device > Server Profiles on every managed firewall.
BConfigure an SNMP Trap destination directly on the managed firewalls' management interface.
CEnable Log Export on the Collector Group to automatically mirror all raw disk partitions via FTP.
Configure a Log Forwarding Profile on Panorama pointing to an external syslog server with specific match criteria.Correct

Log Forwarding Profiles configured within Panorama allow administrators to select specific log types, severities, and filters to forward via syslog, HTTPS, or SNMP to external destinations.

What's covered

Questions are tagged by exam domain. Practice a specific domain or mix them all.

Untimed Practice

Answer at your own pace. Explanation and domain tag shown immediately after each answer.

Timed Practice

Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.

Why practice here?

Full explanations on every question

Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.

Domain score breakdown

After each session see your score by exam domain so you know exactly where to focus study time.

100% free, forever

No subscription, no trial, no email wall. Start a session in under 10 seconds.

Exam-style questions

Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.

← All NetSec-Architect questionsNetSec-Architect exam guideStudy guidePractice by domain