Exam NetSec-Generalist topic 1 question 46 discussion

Actual exam question from Palo Alto Networks's NetSec-Generalist

Question #: 46
Topic #: 1

What is the main security benefit of adding a CN-Series firewall to an existing VM-Series firewall deployment when the customer is using containers?

A. It provides perimeter threat detection and inspection outside the container itself.
B. It prevents lateral threat movement within the container itself.
C. It monitors and logs traffic outside the container itself.
D. It enables core zone segmentation within the container itself.

Show Suggested Answer

Suggested Answer: B 🗳️

by maffo02 at March 31, 2025, 8:57 p.m.

Comments

Submit Cancel

maffo02

2 months, 2 weeks ago

Selected Answer: D

D. It enables core zone segmentation within the container itself. Here's why: CN-Series firewalls are specifically designed for containerized environments. They provide granular security controls and visibility into container traffic, allowing for microsegmentation and preventing lateral movement of threats within the container environment. While VM-Series firewalls secure the perimeter, CN-Series firewalls secure inside the container environment.

upvoted 1 times

...