Free Preparation Discussions
MENU
Palo Alto Networks PSE-Strata-Pro-24 Exam - Topic 4 Question 9 Discussion
Topic #: 4
A systems engineer (SE) is working with a customer that is fully cloud-deployed for all applications. The customer is interested in Palo Alto Networks NGFWs but describes the following challenges:
"Our apps are in AWS and Azure, with whom we have contracts and minimum-revenue guarantees. We would use the built-in firewall on the cloud service providers (CSPs), but the need for centralized policy management to reduce human error is more important."
Which recommendations should the SE make?
North-south traffic refers to the flow of data in and out of a network, typically between internal resources and the internet. To secure this type of traffic, Palo Alto Networks recommends specific CDSS subscriptions in addition to DNS Security:
A . SaaS Security
SaaS Security is designed for monitoring and securing SaaS application usage but is not essential for handling typical north-south traffic.
B . Advanced WildFire
Advanced WildFire provides cloud-based malware analysis and sandboxing to detect and block zero-day threats. It is a critical component for securing north-south traffic against advanced malware.
C . Enterprise DLP
Enterprise DLP focuses on data loss prevention, primarily for protecting sensitive data. While important, it is not a minimum recommendation for securing north-south traffic.
D . Advanced Threat Prevention
Advanced Threat Prevention (ATP) replaces traditional IPS and provides inline detection and prevention of evasive threats in north-south traffic. It is a crucial recommendation for protecting against sophisticated threats.
E . Advanced URL Filtering
Advanced URL Filtering prevents access to malicious or harmful URLs. It complements DNS Security to provide comprehensive web protection for north-south traffic.
Key Takeaways:
Advanced WildFire, Advanced Threat Prevention, and Advanced URL Filtering are minimum recommendations for NGFWs handling north-south traffic, alongside DNS Security.
SaaS Security and Enterprise DLP, while valuable, are not minimum requirements for this use case.
Palo Alto Networks NGFW Best Practices
Cloud-Delivered Security Services
Gene
2 months agoPhillip
2 months agoGerman
3 months agoVerda
3 months agoElly
3 months agoJoanne
3 months agoErick
4 months agoGerald
4 months agoVeda
4 months agoChau
4 months agoShalon
4 months agoRichelle
5 months agoElliott
5 months agoPearly
10 months agoLavonne
9 months agoGilma
9 months agoStephania
9 months agoLinwood
10 months agoJame
9 months agoGraciela
9 months agoTomoko
9 months agoBuddy
10 months agoKeena
10 months agoDaniel
8 months agoAbraham
9 months agoWillow
9 months agoVeronique
10 months agoDell
10 months agoAlecia
10 months agoAliza
10 months agoRanee
10 months agoMalcom
11 months agoLeigha
11 months ago