NGFW-ENGINEER · Question #115
An administrator is configuring dynamic updates on a Palo Alto Networks firewall that protects a hospital's patient record system. The primary concern is ensuring maximum stability and avoiding any se
The correct answer is D. 48 hours. Palo Alto Networks best practices recommend a 48-hour (D) threshold for content update adoption in environments where stability and continuity of service are the highest priority, such as hospital patient record systems. Setting a 48-hour threshold means the firewall will not aut
Question
An administrator is configuring dynamic updates on a Palo Alto Networks firewall that protects a hospital's patient record system. The primary concern is ensuring maximum stability and avoiding any service disruption from a potentially problematic content update. To align with Palo Alto Networks best practices for such environments, which threshold should the administrator set for content updates?
Options
- A0 hours
- B12 hours
- C24 hours
- D48 hours
How the community answered
(17 responses)- A6% (1)
- B18% (3)
- C6% (1)
- D71% (12)
Explanation
Palo Alto Networks best practices recommend a 48-hour (D) threshold for content update adoption in environments where stability and continuity of service are the highest priority, such as hospital patient record systems. Setting a 48-hour threshold means the firewall will not automatically install a new content update until it has been available for 48 hours, providing sufficient time for the broader community and early adopters to surface any issues with a potentially problematic update before it is applied to critical infrastructure. A 0-hour threshold (A) means updates are applied immediately upon release, offering the fastest protection but the least stability testing window. Thresholds of 12 hours (B) and 24 hours (C) offer intermediate trade-offs but are not the recommended setting for maximum-stability environments per Palo Alto best practices.
Topics
Community Discussion
No community discussion yet for this question.