An engineer is creating an automation workflow. The first step is to deploy a new VM-Series firewall into a VMware vSphere environment, including its virtual machine (VM) configuration and network int

Question

Options

• APushing threat intelligence updates to the new firewall
• BDeploying the VM and associated network interfaces
• CStoring the credentials needed to access the vSphere environment
• DApplying the detailed Security policies and objects

• A
  2% (1)
• B
  95% (39)
• D
  2% (1)

Explanation

Terraform is an Infrastructure as Code (IaC) tool designed for provisioning and lifecycle management of infrastructure resources. Deploying a new VM-Series firewall into a vSphere environment - creating the virtual machine, allocating resources, and attaching virtual network interfaces (B) - is precisely the kind of infrastructure provisioning task Terraform excels at. Ansible, on the other hand, is a configuration management tool used to configure software and settings on already-provisioned systems, making it the right tool for applying complex Security policies and objects (D) to the running firewall. Pushing threat intelligence updates (A) is handled by PAN-OS dynamic update mechanisms. Storing credentials for vSphere (C) would be handled by a secrets management solution such as HashiCorp Vault, not Terraform itself.

No community discussion yet for this question.