PCCET · Question #227
You have been invited to a public cloud design and architecture session to help deliver secure east west flows and secure Kubernetes workloads. What deployment options do you have available? (Choose…
The correct answer is B. VM-Series D. CN-Series. VM-Series (B) is Palo Alto Networks' virtualized next-generation firewall deployable directly in public clouds (AWS, Azure, GCP), making it ideal for securing east-west traffic between cloud workloads. CN-Series (D) is the container-native firewall purpose-built for Kubernetes…
Question
You have been invited to a public cloud design and architecture session to help deliver secure east west flows and secure Kubernetes workloads. What deployment options do you have available? (Choose two.)
Options
- APA-Series
- BVM-Series
- CPanorama
- DCN-Series
How the community answered
(60 responses)- A12% (7)
- B82% (49)
- C7% (4)
Explanation
VM-Series (B) is Palo Alto Networks' virtualized next-generation firewall deployable directly in public clouds (AWS, Azure, GCP), making it ideal for securing east-west traffic between cloud workloads. CN-Series (D) is the container-native firewall purpose-built for Kubernetes environments, deployed as a DaemonSet to enforce policy at the pod level - directly addressing the Kubernetes workload security requirement.
PA-Series (A) is wrong because it refers to physical hardware appliances, which cannot be deployed in a public cloud environment. Panorama (C) is wrong because it is a centralized management and visibility platform - it manages firewalls but is not itself a traffic-inspection deployment option.
Memory tip: Match the prefix to the platform - VM-Series = Virtual Machine (cloud), CN-Series = Container/Kubernetes. If the question mentions cloud VMs or east-west flows, think VM-Series; if it mentions Kubernetes or containers, think CN-Series.
Topics
Community Discussion
No community discussion yet for this question.