NGFW-ENGINEER · Question #71
An organization is deploying VM-Series firewalls in Microsoft Azure to secure its VNets. A key requirement is that the security infrastructure must be resilient to the failure of an entire Azure…
The correct answer is A. Deploy multiple, independent VM-Series firewalls in different Availability Zones and use an Azure. Deploying multiple independent VM-Series firewalls across different Azure Availability Zones and placing them behind an Azure Load Balancer provides zone-level fault tolerance by design, ensuring traffic continues to flow if an entire zone fails, without relying on stateful HA…
Question
An organization is deploying VM-Series firewalls in Microsoft Azure to secure its VNets. A key requirement is that the security infrastructure must be resilient to the failure of an entire Azure Availability Zone. What is the recommended method to achieve this goal?
Options
- ADeploy multiple, independent VM-Series firewalls in different Availability Zones and use an Azure
- BImplement a Terraform configuration that automatically redeploys the firewall in a new zone if the
- CUse Azure Traffic Manager to direct traffic to a primary VM-Series firewall, with a second firewall in
- DConfigure PAN-OS active/passive high availability (HA) between two VM-Series instances in
How the community answered
(26 responses)- A81% (21)
- B12% (3)
- C4% (1)
- D4% (1)
Explanation
Deploying multiple independent VM-Series firewalls across different Azure Availability Zones and placing them behind an Azure Load Balancer provides zone-level fault tolerance by design, ensuring traffic continues to flow if an entire zone fails, without relying on stateful HA dependencies or single-instance failover mechanisms.
Topics
Community Discussion
No community discussion yet for this question.