Paloalto Networks Network Security Administrator NetSec-Generalist Question # 8 Topic 1 Discussion

In aPrisma SD-WAN environment, themost operationally efficient waytooptimize and secure trafficbetween branch offices and the data center is toconfigure dynamic path selection.

Monitors Real-Time Network Performance– Prisma SD-WAN continuously measureslatency, jitter, and packet lossacross multiple WAN links.

Automatically Chooses the Best Path– It dynamically routes traffic throughthe best-performing linktomaintain high application performance.

Improves Reliability and Redundancy– If a link degrades,failover occurs seamlesslyto another available path.

Enhances Security– Works inconjunction with security policiesto route sensitive traffic throughtrusted paths.

A. Ensure all branch office traffic is routed through a central hub for inspection.❌

Incorrect, because ahub-and-spoke model introduces unnecessary latencyand reducesnetwork efficiency.

Prisma SD-WAN is designed to enabledirect and secure branch-to-branch communicationwithout forcing all traffic through acentralized data center.

B. Create NAT policies to translate internal branch IP addresses to public IP addresses.❌

Incorrect, becauseNAT policies do not optimize network performance—they are used foraddress translation.

Prisma SD-WAN dynamically selects pathsbased on performance metrics, not just address translation.

C. Define security zones for branch offices and the data center.❌

Incorrect, becausesecurity zones provide segmentation and control, but they do notdirectly optimize network performance.

Whilesecurity zoning is essential, it does not solve the problem ofchoosing the best network path dynamically.

Firewall Deployment– Prisma SD-WANintegrates with NGFWsfor secure traffic routing.

Security Policies– Ensures traffic is optimizedwhile maintaining security compliance.

VPN Configurations– Works withIPsec VPN tunnelsto choosethe best available path dynamically.

Threat Prevention– Prevents attacks bydynamically routing traffic away from compromised paths.

WildFire Integration– Monitors suspicious trafficbefore dynamically selecting paths.

Zero Trust Architectures– Enforcessecure network segmentationwhileoptimizing branch-to-data center communication.

How Dynamic Path Selection Optimizes Traffic:Why Other Options Are Incorrect?References to Firewall Deployment and Security Features:Thus, the correct answer is:✅D. Configure dynamic path selection based on network performance metrics.