PSE-SOFTWARE-FIREWALL practice question 2 of 25

What are two methods or tools to directly automate the deployment of VM-Series NGFWs into supported public clouds? (Choose two.)

Full set: 151 questions
Answer options
A: GitHub PaloAltoNetworks Terraform SWFW modules Correct answer
B: Deployment configuration in the public cloud Panorama plugins
C: paloaltonetworks.panos Ansible collection
D: panos Terraform provider Correct answer
Correct Answer:
A. GitHub PaloAltoNetworks Terraform SWFW modules; D. panos Terraform provider
Explanation

Automating VM-Series firewall deployment in public clouds is crucial for efficient and consistent deployments. Here's a breakdown of the options:
A . GitHub PaloAltoNetworks Terraform SWFW modules: This is a VALID method. Palo Alto Networks maintains Terraform modules on GitHub specifically designed for deploying VM-Series firewalls in various cloud environments (AWS, Azure, GCP). These modules provide pre-built configurations and best practices, simplifying and automating the infrastructure provisioning.
Reference: The Palo Alto Networks GitHub repositories (specifically under the PaloAltoNetworks organization) host these Terraform modules. The Software Firewall Automation HUB on the pan.dev website also provides information and links to these modules.
B . Deployment configuration in the public cloud Panorama plugins: While Panorama plugins enhance management and visibility, they don't directly automate the deployment of the VM-Series instances themselves in the cloud provider's infrastructure. Plugins primarily focus on post- deployment configuration, management, and monitoring. They rely on the instances being already deployed.
C . paloaltonetworks.panos Ansible collection: While Ansible is a powerful automation tool and the paloaltonetworks.panos collection allows for configuring and managing existing Palo Alto Networks devices, it's not the primary tool for deploying the VM-Series instances in the cloud. It's used for configuration after the instances are deployed.
D . panos Terraform provider: This is a VALID method. The Terraform provider for Palo Alto Networks firewalls (panos) allows for managing the configuration of the firewalls (like policies, objects, etc.) but also, importantly, can be used in conjunction with cloud provider Terraform providers (like aws, azurerm, google) to automate the entire deployment process, including the creation of the VM instances themselves. 79/103
Reference: The Terraform Registry hosts the panos provider, and its documentation explains its capabilities, including infrastructure provisioning in conjunction with cloud providers.

Scroll to Top