Palo Alto Networks NGFW Engineer — Question 59

A network security engineer is reviewing the dynamic update settings for a fleet of firewalls in a financial institution that has a policy prioritizing operational stability above all else. The engineer notes that the current content update threshold is set to 24 hours.

Following the Palo Alto Networks recommended best practices for mission-critical deployments, which adjustment should be made to the threshold?

Answer options

• A. Change to "download only" and schedule manual installation.
• B. Increase to 48 hours.
• C. Decrease to 12 hours.
• D. Reset to reconfirm 24 hours.

Correct answer: B

Explanation

Increasing the threshold to 48 hours allows for a more stable update process, which is in line with the institution's priority on operational stability. Decreasing the threshold to 12 hours may introduce unnecessary risk with more frequent updates, while the other options either do not change the threshold or suggest manual intervention, which doesn't align with best practices for such deployments.