PCNSE · Question #81
Which one of these is not a factor impacting sizing decisions?
The correct answer is D. Number of applications. The sheer number of applications identified by the firewall is not a primary factor influencing hardware sizing decisions, unlike decryption, session count, redundancy, performance, and rule count.
Question
Which one of these is not a factor impacting sizing decisions?
Options
- ADecryption
- BSessions
- CRedundancy
- DNumber of applications
- EPerformance
- FNumber of rules
How the community answered
(29 responses)- A3% (1)
- C7% (2)
- D86% (25)
- E3% (1)
Why each option
The sheer number of applications identified by the firewall is not a primary factor influencing hardware sizing decisions, unlike decryption, session count, redundancy, performance, and rule count.
Decryption significantly increases CPU and memory load, making it a critical factor for sizing decisions.
The total number of concurrent sessions the firewall needs to maintain directly impacts memory and processing power requirements.
Redundancy (e.g., High Availability configurations) impacts the number of physical devices needed, which is a fundamental sizing decision.
The number of distinct applications identified by the firewall (App-ID) does not directly determine the sizing requirements of the hardware itself; instead, the volume of traffic, security features applied, and session count are the critical sizing factors.
Overall performance requirements, such as throughput and latency, are fundamental sizing considerations for any firewall.
The number of security rules affects the processing overhead as the firewall must evaluate traffic against a larger and more complex policy set.
Concept tested: Firewall sizing considerations
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/firewall-performance-and-sizing/firewall-sizing-factors.html
Topics
Community Discussion
No community discussion yet for this question.