Palo Alto Networks Certified Strata Field Engineer (PCSFE) — Question 76

What is the valid command to setup the cluster for CN-series firewall HSF Deployment and to prepare the extend permissions for service account?

Answer options

• A. kubectl -n kube-system get secrets kubectl -n kube-system get secrets (secrets-from-above-command) -o json >> cred.json kubectl apply -f plugin-deploy-serviceaccount.yaml kubectl apply -f pan-mgmt-serviceaccount.yaml
• B. kubectl apply -f plugin-deploy-serviceaccount.yaml kubectl apply -f pan-mgmt-serviceaccount.yaml kubectl -n kube-system get secrets kubectl -n kube-system get secrets (secrets-from-above-command) -o json >> cred.json
• C. kubectl apply -f plugin-deploy-serviceaccount.yaml kubectl -n kube-system get secrets kubectl apply -f pan-mgmt-serviceaccount.yaml kubectl -n kube-system get secrets (secrets-from-above-command) -o json >> cred.json
• D. kubectl -n kube-system get secrets kubectl -n kube-system get secrets (secrets-from-above-command) -o json >> cred.json kubectl apply -f pan-mgmt-serviceaccount.yaml kubectl apply -f plugin-deploy-serviceaccount.yaml

Correct answer: B

Explanation

Option B is correct because it follows the necessary sequence for setting up the service accounts and retrieving secrets correctly. The other options either rearrange the commands or apply the service accounts in the wrong order, which could lead to incorrect configurations and permissions during deployment.