PSE-SOFTWARE-FIREWALL practice question 2 of 25
What are two methods or tools to directly automate the deployment of VM-Series NGFWs into supported public clouds? (Choose two.)
Full set: 151 questionsAutomating VM-Series firewall deployment in public clouds is crucial for efficient and consistent deployments. Here's a breakdown of the options:
A . GitHub PaloAltoNetworks Terraform SWFW modules: This is a VALID method. Palo Alto Networks maintains Terraform modules on GitHub specifically designed for deploying VM-Series firewalls in various cloud environments (AWS, Azure, GCP). These modules provide pre-built configurations and best practices, simplifying and automating the infrastructure provisioning.
Reference: The Palo Alto Networks GitHub repositories (specifically under the PaloAltoNetworks organization) host these Terraform modules. The Software Firewall Automation HUB on the pan.dev website also provides information and links to these modules.
B . Deployment configuration in the public cloud Panorama plugins: While Panorama plugins enhance management and visibility, they don't directly automate the deployment of the VM-Series instances themselves in the cloud provider's infrastructure. Plugins primarily focus on post- deployment configuration, management, and monitoring. They rely on the instances being already deployed.
C . paloaltonetworks.panos Ansible collection: While Ansible is a powerful automation tool and the paloaltonetworks.panos collection allows for configuring and managing existing Palo Alto Networks devices, it's not the primary tool for deploying the VM-Series instances in the cloud. It's used for configuration after the instances are deployed.
D . panos Terraform provider: This is a VALID method. The Terraform provider for Palo Alto Networks firewalls (panos) allows for managing the configuration of the firewalls (like policies, objects, etc.) but also, importantly, can be used in conjunction with cloud provider Terraform providers (like aws, azurerm, google) to automate the entire deployment process, including the creation of the VM instances themselves. 79/103
Reference: The Terraform Registry hosts the panos provider, and its documentation explains its capabilities, including infrastructure provisioning in conjunction with cloud providers.
Keep practicing
Take the free PSE-SOFTWARE-FIREWALL practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PSE-SOFTWARE-FIREWALL practice questions
- Question 1Which Palo Alto Networks firewall provides network security when deploying a microservice…
- Question 3What is required to integrate a Palo Alto Networks VM-Series firewall with Azure Orchestr…
- Question 4What Palo Alto Networks software firewall protects Amazon Web Services (AWS) deployments …
- Question 5Which two design options address split brain when configuring high availability (HA)? (Ch…
- Question 6Which software firewall would help a prospect interested in securing an environment with …
- Question 7Which offering can gain visibility and prevent an attack by a malicious actor attempting …
