nerdexam
CompTIA

CV0-003 · Question #210

Which of the following provides the BEST approach for deploying multiple new firewalls into an IaaS cloud environment with minimal errors?

The correct answer is C. Automated and orchestrated deployment. Automated and orchestrated deployment using Infrastructure as Code tools ensures consistent, repeatable, and error-minimized firewall configuration across multiple instances in an IaaS environment.

Deployment

Question

Which of the following provides the BEST approach for deploying multiple new firewalls into an IaaS cloud environment with minimal errors?

Options

  • AManual deployment configuration
  • BCloud provider installation
  • CAutomated and orchestrated deployment
  • DFirewall configuration clone

How the community answered

(59 responses)
  • A
    5% (3)
  • B
    2% (1)
  • C
    92% (54)
  • D
    2% (1)

Why each option

Automated and orchestrated deployment using Infrastructure as Code tools ensures consistent, repeatable, and error-minimized firewall configuration across multiple instances in an IaaS environment.

AManual deployment configuration

Manual deployment configuration is error-prone and produces inconsistent results across multiple firewalls, directly contradicting the requirement for minimal errors at scale.

BCloud provider installation

Cloud provider installation is a vague, non-specific approach that does not address the consistency or error-reduction requirements needed when deploying multiple firewalls with complex configurations.

CAutomated and orchestrated deploymentCorrect

Automated and orchestrated deployment uses tools such as Terraform, AWS CloudFormation, or Azure Resource Manager to define firewall configurations as code, ensuring every instance is deployed identically and reducing the chance of human error. Orchestration also enables version control, peer review, and rollback of configurations, which are critical controls when deploying multiple security devices simultaneously. This approach is the industry best practice for managing infrastructure at scale in cloud environments.

DFirewall configuration clone

Cloning a firewall configuration can propagate existing misconfigurations or errors to all deployed instances and does not provide the orchestration and state management needed for reliable multi-device deployments.

Concept tested: Infrastructure as Code for IaaS security device deployment

Source: https://learn.microsoft.com/en-us/azure/architecture/framework/security/design-network-segmentation

Topics

#firewall deployment#IaaS#orchestration#automation

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice