Palo Alto Networks NGFW Engineer — Question 61

A DevOps team is building a repeatable process for deploying new Palo Alto Networks VM-Series firewalls. The entire infrastructure, including virtual networks, subnets, and the firewalls themselves, must be defined in code to ensure consistency and enable version control.

Which tool is primarily used for this type of declarative Infrastructure as Code (IaC) provisioning?

Answer options

• A. Terraform
• B. Azure DevOps
• C. Ansible
• D. Panorama

Correct answer: A

Explanation

Terraform is specifically designed for declarative Infrastructure as Code (IaC) provisioning, allowing teams to define infrastructure through code for consistency and version control. Azure DevOps is a set of development tools but not specifically an IaC tool. Ansible is more of an imperative configuration management tool rather than a purely declarative IaC solution. Panorama is a management tool for Palo Alto Networks devices and does not serve the purpose of provisioning infrastructure as code.