Palo Alto Networks Certified Strata Field Engineer (PCSFE) — Question 41

How are Palo Alto Networks Next-Generation Firewalls (NGFWs) deployed within a Cisco ACI architecture?

Answer options

• A. SDN code hooks can help detonate malicious file samples designed to detect virtual environments.
• B. Traffic can be automatically redirected using static address objects.
• C. Service graphs are configured to allow their deployment.
• D. VXLAN or NVGRE traffic is terminated and inspected for translation to VLANs.

Correct answer: C

Explanation

The correct answer, C, indicates that service graphs are used to facilitate the deployment of NGFWs within a Cisco ACI architecture. Option A discusses SDN code hooks, which are not relevant to NGFW deployment, while option B refers to traffic redirection, which is not the method for implementing NGFWs. Option D talks about VXLAN or NVGRE traffic termination, which is also not directly related to the deployment of NGFWs in this context.