ExamGecko
Question list
Search
Search

Question 12 - PCSFE discussion

Report
Export

Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)

A.
Full set of APIs enabling programmatic control of policy and configuration
Answers
A.
Full set of APIs enabling programmatic control of policy and configuration
B.
VXLAN support for network-layer abstraction
Answers
B.
VXLAN support for network-layer abstraction
C.
Dynamic Address Groups to adapt Security policies dynamically
Answers
C.
Dynamic Address Groups to adapt Security policies dynamically
D.
NVGRE support for advanced VLAN integration
Answers
D.
NVGRE support for advanced VLAN integration
Suggested answer: A, C

Explanation:

The two elements of the Palo Alto Networks platform architecture that enable security orchestration in a software-defined network (SDN) are:

Full set of APIs enabling programmatic control of policy and configuration

Dynamic Address Groups to adapt Security policies dynamically

The Palo Alto Networks platform architecture consists of four key elements: natively integrated security technologies, full set of APIs, cloud-delivered services, and centralized management. The full set of APIs enables programmatic control of policy and configuration across the platform, allowing for automation and integration with SDN controllers and orchestration tools. Dynamic Address Groups are objects that represent groups of IP addresses based on criteria such as tags, regions, interfaces, or user-defined attributes. Dynamic Address Groups allow Security policies to adapt dynamically to changes in the network topology or workload characteristics without requiring manual updates. VXLAN support for network-layer abstraction and NVGRE support for advanced VLAN integration are not elements of the Palo Alto Networks platform architecture, but they are features that support SDN deployments. Reference: Palo Alto Networks Certified Software Firewall Engineer (PCSFE), [Palo Alto Networks Platform Architecture], [API Overview], [Dynamic Address Groups Overview]

asked 23/09/2024
Meghan Crofford
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first