nerdexam
Palo_Alto_Networks

PCNSE · Question #71

Which hardware platform should I consider if the customer needs at least 1 Gbps of Threat Prevention throughput and the ability to handle at least 250K sessions?

The correct answer is C. Any PA-3000, PA-5000, or PA-7000 series firewall. Selecting the appropriate Palo Alto Networks hardware platform requires matching customer performance requirements for threat prevention throughput and session capacity to the specifications of different firewall series.

Submitted by fatema_kw· Apr 18, 2026Plan

Question

Which hardware platform should I consider if the customer needs at least 1 Gbps of Threat Prevention throughput and the ability to handle at least 250K sessions?

Options

  • AAny PA-5000 or PA-7000 series firewall
  • BOnly the PA-3060 firewall and higher
  • CAny PA-3000, PA-5000, or PA-7000 series firewall
  • DOnly the PA-3050 firewall and higher

How the community answered

(54 responses)
  • A
    7% (4)
  • B
    2% (1)
  • C
    89% (48)
  • D
    2% (1)

Why each option

Selecting the appropriate Palo Alto Networks hardware platform requires matching customer performance requirements for threat prevention throughput and session capacity to the specifications of different firewall series.

AAny PA-5000 or PA-7000 series firewall

While these series meet the requirements, this choice excludes the PA-3000 series, which also meets the stated criteria, making it an incomplete answer.

BOnly the PA-3060 firewall and higher

This option is too restrictive; models within the PA-3000 series (like PA-3020, PA-3050) also meet the requirements, as do the PA-5000 and PA-7000 series.

CAny PA-3000, PA-5000, or PA-7000 series firewallCorrect

Based on Palo Alto Networks' product specifications, the PA-3000 series (e.g., PA-3020, PA-3050, PA-3060) typically offers Threat Prevention throughputs starting around 1.5 Gbps and session capacities well above 250K, while the PA-5000 and PA-7000 series provide even higher performance, thus meeting or exceeding the stated requirements of 1 Gbps Threat Prevention and 250K sessions.

DOnly the PA-3050 firewall and higher

This option is too restrictive, excluding other suitable PA-3000 models and the higher-performing PA-5000 and PA-7000 series.

Concept tested: Palo Alto Networks hardware sizing

Source: https://www.paloaltonetworks.com/products/next-generation-firewalls/pa-series

Topics

#Hardware Platforms#Firewall Sizing#Performance Specifications#Threat Prevention

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice