When integrating Kubernetes with Palo Alto Networks NGFWs, what is used to secure traffic between microservices?

The correct answer is D. CN-Series firewalls. CN-Series (Container-series) firewalls are Palo Alto Networks' containerized, cloud-native NGFW designed specifically for Kubernetes environments. They run as containers within Kubernetes clusters and enforce Layer 7 security policies for east-west traffic between microservices…

Securing Cloud-Native Applications with Palo Alto Networks

Question

Options

AService graph
BAnsible automation modules
CPanorama role-based access control
DCN-Series firewalls

How the community answered

(60 responses)

A
2% (1)
B
3% (2)
C
2% (1)
D
93% (56)

Explanation

CN-Series (Container-series) firewalls are Palo Alto Networks' containerized, cloud-native NGFW designed specifically for Kubernetes environments. They run as containers within Kubernetes clusters and enforce Layer 7 security policies for east-west traffic between microservices and pods. CN-Series integrates with Kubernetes APIs to dynamically apply policies based on pod labels, namespaces, and service identities - addressing the challenge that container workloads are ephemeral and constantly changing IP addresses. The other options are distractors: service graphs are a visualization concept, Ansible modules are for configuration automation (not traffic enforcement), and Panorama RBAC is an administrative access control mechanism, not a traffic security tool.

Topics

#Kubernetes Security#Container Security#Palo Alto Networks CN-Series#Microservices Security

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice