Palo Alto Networks Exam PSE-SoftwareFirewall Topic 4 Question 22 Discussion

Actual exam question for Palo Alto Networks's PSE-SoftwareFirewall exam

Question #: 22
Topic #: 4

Why are VM-Series firewalls and hardware firewalls that are external to the Kubernetes cluster problematic for protecting containerized workloads?

AThey function differently based on whether they are located inside or outside of the cluster.

BThey are located outside the cluster and have no visibility into application-level cluster traffic.

CThey are managed by another entity when located inside the cluster.

DThey do not scale independently of the Kubernetes cluster.

Show Suggested Answer

Suggested Answer: B

Visibility into application-level cluster traffic:

VM-Series firewalls and hardware firewalls that are external to the Kubernetes cluster lack the necessary visibility into the traffic and communications occurring at the application level within the cluster. This limitation impedes their ability to effectively protect containerized workloads.

Palo Alto Networks Kubernetes Security Guide

by Shaniqua at Mar 20, 2025, 10:20 AM

Limited Time Offer

25%

Off

Get Premium PSE-SoftwareFirewall Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shannon

6 days ago

I think the main problem is that they function differently based on their location inside or outside the cluster.

upvoted 0 times

...

Jean

7 days ago

I believe the issue is that they do not scale independently of the Kubernetes cluster.

upvoted 0 times

...

Theron

15 days ago

I agree with Ilene, external firewalls have no visibility into application-level cluster traffic.

upvoted 0 times

...

Dulce

15 days ago

B definitely makes the most sense. You can't protect what you can't see, and those external firewalls are basically blind to the inner workings of the cluster.

upvoted 0 times

...

Dalene

16 days ago

I'd go with D. Those firewalls don't scale independently, so they can't keep up with the dynamic nature of Kubernetes. Imagine trying to wrestle a tiger with a leash, that's what it must feel like.

upvoted 0 times

...

Ilene

17 days ago

I think VM-Series firewalls and external hardware firewalls are problematic for protecting containerized workloads because they are located outside the cluster.

upvoted 0 times

...

Val

25 days ago

Option B sounds right to me. External firewalls have no idea what's happening inside the Kubernetes cluster, so they can't really protect those containerized workloads effectively.

upvoted 0 times

Flo

11 days ago

B) They are located outside the cluster and have no visibility into application-level cluster traffic.

upvoted 0 times

...

Venita

12 days ago

A) They function differently based on whether they are located inside or outside of the cluster.

upvoted 0 times

...