What are two methods or tools to directly automate the deployment of VM-Series NGFWs into supported public clouds? (Choose two.)

Automating VM-Series firewall deployment in public clouds is crucial for efficient and consistent

deployments. Here's a breakdown of the options:

A . GitHub PaloAltoNetworks Terraform SWFW modules: This is a VALID method. Palo Alto Networks

maintains Terraform modules on GitHub specifically designed for deploying VM-Series firewalls in

various cloud environments (AWS, Azure, GCP). These modules provide pre-built configurations and

best practices, simplifying and automating the infrastructure provisioning.

Reference: The Palo Alto Networks GitHub repositories (specifically under the PaloAltoNetworks

organization) host these Terraform modules. The Software Firewall Automation HUB on the pan.dev

website also provides information and links to these modules.

B . Deployment configuration in the public cloud Panorama plugins: While Panorama plugins enhance

management and visibility, they don't directly automate the deployment of the VM-Series instances

themselves in the cloud provider's infrastructure. Plugins primarily focus on post- deployment

configuration, management, and monitoring. They rely on the instances being already deployed.

C . paloaltonetworks.panos Ansible collection: While Ansible is a powerful automation tool and the

paloaltonetworks.panos collection allows for configuring and managing existing Palo Alto Networks

devices, it's not the primary tool for deploying the VM-Series instances in the cloud. It's used for

configuration after the instances are deployed.

D . panos Terraform provider: This is a VALID method. The Terraform provider for Palo Alto Networks

firewalls (panos) allows for managing the configuration of the firewalls (like policies, objects, etc.) but

also, importantly, can be used in conjunction with cloud provider Terraform providers (like aws, azurerm,

google) to automate the entire deployment process, including the creation of the VM instances

themselves.

79/103

Reference: The Terraform Registry hosts the panos provider, and its documentation explains its

capabilities, including infrastructure provisioning in conjunction with cloud providers.