CV0-003 · Question #210
Which of the following provides the BEST approach for deploying multiple new firewalls into an IaaS cloud environment with minimal errors?
The correct answer is C. Automated and orchestrated deployment. Automated and orchestrated deployment using Infrastructure as Code tools ensures consistent, repeatable, and error-minimized firewall configuration across multiple instances in an IaaS environment.
Question
Which of the following provides the BEST approach for deploying multiple new firewalls into an IaaS cloud environment with minimal errors?
Options
- AManual deployment configuration
- BCloud provider installation
- CAutomated and orchestrated deployment
- DFirewall configuration clone
How the community answered
(59 responses)- A5% (3)
- B2% (1)
- C92% (54)
- D2% (1)
Why each option
Automated and orchestrated deployment using Infrastructure as Code tools ensures consistent, repeatable, and error-minimized firewall configuration across multiple instances in an IaaS environment.
Manual deployment configuration is error-prone and produces inconsistent results across multiple firewalls, directly contradicting the requirement for minimal errors at scale.
Cloud provider installation is a vague, non-specific approach that does not address the consistency or error-reduction requirements needed when deploying multiple firewalls with complex configurations.
Automated and orchestrated deployment uses tools such as Terraform, AWS CloudFormation, or Azure Resource Manager to define firewall configurations as code, ensuring every instance is deployed identically and reducing the chance of human error. Orchestration also enables version control, peer review, and rollback of configurations, which are critical controls when deploying multiple security devices simultaneously. This approach is the industry best practice for managing infrastructure at scale in cloud environments.
Cloning a firewall configuration can propagate existing misconfigurations or errors to all deployed instances and does not provide the orchestration and state management needed for reliable multi-device deployments.
Concept tested: Infrastructure as Code for IaaS security device deployment
Source: https://learn.microsoft.com/en-us/azure/architecture/framework/security/design-network-segmentation
Topics
Community Discussion
No community discussion yet for this question.