Which three tools are available to customers to facilitate the simplified and/or best-practice configuration of Palo Alto Networks Next-Generation Firewalls (NGFWs)? (Choose three.)

Question

Options

• ATelemetry to ensure that Palo Alto Networks has full visibility into the firewall configuration
• BDay 1 Configuration through the customer support portal (CSP)
• CPolicy Optimizer to help identify and recommend Layer 7 policy changes
• DExpedition to enable the creation of custom threat signatures
• EBest Practice Assessment (BPA) in Strata Cloud Manager (SCM)

• A
  3% (1)
• B
  13% (4)
• C
  84% (27)

Explanation

Option C: This is a key tool for simplifying and optimizing security policies. Policy Optimizer analyzes traffic logs and provides recommendations for refining Layer 7 policies based on application usage. This helps reduce policy complexity and improve security posture by ensuring policies are as specific as possible. Option D: Expedition is a migration tool that can also be used to create custom App-IDs and threat signatures. While primarily for migrations, its ability to create custom signatures helps tailor the firewall's protection to specific environments and applications, which is a form of configuration Option E: The BPA is a powerful tool that analyzes firewall configurations against Palo Alto Networks best practices. It provides detailed reports with recommendations for improving security, performance, and compliance. This is a direct way to ensure configurations adhere to

No community discussion yet for this question.