Palo Alto Networks Certified Strata Field Engineer (PCSFE) — Question 29

Using what two commands can an engineer confirm that the installation of the CN-series firewall as a K8S service on the production GKE cluster was successful after it was protected by the cloud workloads on GKE and YAML was downloaded to completed the setup? (Choose two.)

Answer options

• A. kubectl get pods -f app=pan-cn-mgmt -n kube-system
• B. kubectl get pods -l app=pan-mgmt -n kube-system
• C. kubectl get pods -n kube-system -l app=pan-ngfw -o wide
• D. kubectl get pods app=pan-cn-ngfw -o wide

Correct answer: A, B

Explanation

Options A and B are correct because they provide the appropriate label selectors to check the pods related to the CN-series firewall management in the kube-system namespace. Option C, while it retrieves pods, focuses on a different application, and Option D lacks the correct syntax for label selection, making them unsuitable for confirming the installation of the CN-series firewall.