nerdexam
Palo_Alto_Networks

PSE-STRATADC · Question #55

For which two reasons would an administrator have to install NGFW automatically in a cloud environment? (Choose two )

The correct answer is B. performance, to be able to install a new firewall when the demand exceeds the ability of the E. security, to automatically install a firewall when a security threat is detected. Automatic NGFW deployment in cloud environments is driven by dynamic, event-triggered needs: B addresses auto-scaling, where the system spins up a new firewall instance when traffic or demand surpasses the current firewall's capacity - a core cloud elasticity pattern; E…

Cloud Security Architecture

Question

For which two reasons would an administrator have to install NGFW automatically in a cloud environment? (Choose two )

Options

  • Areduce capital expenses
  • Bperformance, to be able to install a new firewall when the demand exceeds the ability of the
  • Cintegrity, to ensure that data is not changed illicitly
  • Dresiliency and availability, to be able to install a new firewall as part of a new environment if an
  • Esecurity, to automatically install a firewall when a security threat is detected

How the community answered

(45 responses)
  • A
    16% (7)
  • B
    71% (32)
  • C
    9% (4)
  • D
    4% (2)

Explanation

Automatic NGFW deployment in cloud environments is driven by dynamic, event-triggered needs: B addresses auto-scaling, where the system spins up a new firewall instance when traffic or demand surpasses the current firewall's capacity - a core cloud elasticity pattern; E addresses automated security response, where a detected threat triggers immediate firewall deployment without waiting for human intervention.

A (reduce capital expenses) is wrong because CapEx reduction is a general cloud benefit, not a trigger or reason for automatic installation specifically. C (integrity) is a data protection goal addressed through encryption and access controls, not a condition that triggers auto-deploying a firewall. D (resiliency and availability) sounds plausible but describes a planned/orchestrated deployment scenario (e.g., new environment provisioning), not an automatic response to a real-time condition - and the answer choices already give us the two dynamic triggers.

Memory tip: Think of the word "automatically" as your filter - only keep answers that describe a real-time trigger: demand spikes (performance) and attack detection (security). Everything else is either a static benefit (CapEx) or a planned action (resiliency, integrity).

Topics

#auto-scaling#cloud deployment automation#security elasticity#NGFW provisioning

Community Discussion

No community discussion yet for this question.

Full PSE-STRATADC Practice