Palo Alto Networks Certified Strata Field Engineer (PCSFE) — Question 11

Which two community-supported Palo Alto Networks templates will protect cloud workloads by using a CN-Series firewall on GKE? (Choose two.)

Answer options

• A. Marketplace
• B. Ansible
• C. Helm
• D. Terraform

Correct answer: C, D

Explanation

The correct answers are C and D because both Helm and Terraform are widely used for managing Kubernetes applications and infrastructure as code, respectively, making them suitable for deploying CN-Series firewalls in GKE. Options A and B, while useful in different contexts, do not specifically target the deployment of CN-Series firewalls on Google Kubernetes Engine.