Palo Alto Networks Certified Strata Field Engineer (PCSFE) — Question 79

In the Cloud NGFW for AWS distributed outbound architecture model, what is the first hop the traffic takes from the source?

Answer options

• A. Internet gateway
• B. Cloud NGFW
• C. NGFW endpoint
• D. NAT gateway

Correct answer: C

Explanation

The traffic's initial step in the outbound architecture is through the NGFW endpoint, making it the first hop. The Internet gateway, Cloud NGFW, and NAT gateway serve different roles in the architecture but do not function as the primary entry point for traffic originating from the source.