Palo Alto Networks Certified Strata Field Engineer (PCSFE) — Question 4

How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?

Answer options

• A. It must be deployed as a member of a device cluster.
• B. It must use a Layer 3 underlay network.
• C. It must receive all forwarding lookups from the network controller.
• D. It must be identified as a default gateway.

Correct answer: B

Explanation

The correct answer is B because a Layer 3 underlay network is essential for proper routing and communication within the Cisco ACI environment. Options A and C are not related to the essential configuration needed for traffic security, and option D does not directly pertain to the requirement of securing traffic in this context.