Palo Alto Networks NGFW Engineer — Question 64

When an engineer creates a new VSYS on a supported firewall platform, which resource can be explicitly limited in the VSYS configuration to control its capacity?

Answer options

• A. Dedicated dataplane memory
• B. Maximum number of admin accounts
• C. Maximum number of log entries
• D. Maximum number of NAT rules

Correct answer: D

Explanation

The correct answer is D because the maximum number of NAT rules can be explicitly set to limit the capacity of the VSYS. The other options, while relevant to firewall configurations, do not pertain to the explicit capacity limitations that can be configured for a VSYS.