CYBERSECURITY-PRACTITIONER practice question 9 of 30
Which feature of the VM-Series firewalls allows them to fully integrate into the DevOps workflows and CI/CD pipelines without slowing the pace of business?
Full set: 225 questionsElastic scalability is the core feature that enables VM-Series firewalls to integrate seamlessly into DevOps workflows and CI/CD pipelines. This capability allows security infrastructure to be treated as code, enabling automated provisioning, configuration, and scaling in lockstep with application workloads. By using templates (e.g., Terraform, AWS CloudFormation) and APIs, firewalls can be automatically deployed and de-provisioned as needed. This ensures that security is not a bottleneck and can operate at the speed required by modern, agile development practices, maintaining the pace of business innovation without compromising on security posture.
B. 5G: This is a cellular network technology standard. While Palo Alto Networks provides security for 5G environments, it is not a feature of the VM-Series firewall that enables DevOps integration.
C. External dynamic lists: This feature automates policy updates based on external sources, which is a form of automation, but it does not address the fundamental need for scaling firewall instances alongside applications in a CI/CD pipeline.
D. Log export: This is a standard function for sending logs to external monitoring systems like a SIEM. It is crucial for visibility but does not enable the automated deployment and scaling required for CI/CD integration.
1. Palo Alto Networks, "VM-Series Virtual Next-Generation Firewalls Datasheet": "The VM-Series firewall can be fully automated and integrated with your CI/CD pipeline... You can use the RESTful APIs, and native automation and orchestration tools, such as Ansible® and Terraform, to provision firewalls as your workloads and applications change." This document emphasizes automation and integration with CI/CD tools, which is achieved through programmatic control and scalability.
2. Palo Alto Networks, "Automate Security for DevOps" Solution Brief: "Palo Alto Networks lets you automate security in your CI/CD pipeline... As developers spin up new application instances, they can automatically provision a VM-Series firewall..." This directly links the automated provisioning and scaling of VM-Series to the CI/CD pipeline, a concept embodied by elastic scalability.
3. Palo Alto Networks TechDocs, "Auto Scaling the VM-Series Firewall on AWS": This deployment guide provides detailed instructions on how to "launch and terminate VM-Series firewalls to scale in and out based on traffic demand." This is a direct implementation of elastic scalability, a key requirement for dynamic DevOps environments. (See: VM-Series Deployment Guide for AWS, section on Auto Scaling).
Keep practicing
Take the free CYBERSECURITY-PRACTITIONER practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CYBERSECURITY-PRACTITIONER practice questions
- Question 1What is an operation of an Attack Surface Management (ASM) platform?
- Question 3How can local systems eliminate vulnerabilities?
- Question 4With regard to cloud-native security in layers, what is the correct order of the four C's…
- Question 5Identify a weakness of a perimeter-based network security strategy to protect an organiza…
- Question 6How does Cortex XSOAR Threat Intelligence Management (TIM) provide relevant threat data t…
- Question 7Which security component can detect command-and-control traffic sent from multiple endpoi…
