U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Palo Alto Networks PSE-Strata Exam - Topic 5 Question 97 Discussion

What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?
D) Use dynamic updates with the most aggressive schedule required by business needs
A) Run a Perl script to regularly check for updates and alert when one is released
B) Monitor update announcements and manually push updates to Crewall
C) Store updates on an intermediary server and point all the firewalls to it

Palo Alto Networks PSE-Strata Exam - Topic 5 Question 97 Discussion

Actual exam question for Palo Alto Networks's PSE-Strata exam
Question #: 97
Topic #: 5
[All PSE-Strata Questions]

What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

0/2000 characters
Glenn
7 months ago
B is a solid choice if you want more control over the process.
upvoted 0 times
...
Tegan
7 months ago
Wait, can we really rely on dynamic updates all the time?
upvoted 0 times
...
Kindra
7 months ago
Definitely agree with D, dynamic updates are key!
upvoted 0 times
...
Clay
8 months ago
A sounds too complicated for regular updates.
upvoted 0 times
...
Ciara
8 months ago
I think D is the best option for staying current.
upvoted 0 times
...
Jolene
8 months ago
I definitely remember discussing dynamic updates in class, so I think option D is the best choice, but I wonder if there are any downsides to that method.
upvoted 0 times
...
Darrel
8 months ago
I feel like storing updates on an intermediary server could be useful, but I can't recall if that's the most recommended approach. Maybe option C?
upvoted 0 times
...
Christiane
8 months ago
I remember a practice question that mentioned monitoring updates manually, which makes me lean towards option B, but it seems less efficient than automated methods.
upvoted 0 times
...
Hildegarde
8 months ago
I think option D sounds right since dynamic updates are usually the best way to stay current, but I'm not completely sure about the "aggressive schedule" part.
upvoted 0 times
...
Helga
8 months ago
I'm leaning towards option B - monitoring update announcements and manually pushing updates to the firewalls. That way, you have more control over the process and can ensure the updates are properly tested before deployment. The automated options might be too risky.
upvoted 0 times
...
Ronnie
8 months ago
Definitely go with option D - dynamic updates with the most aggressive schedule. That's the only way to ensure your firewalls are truly up-to-date and protected against the latest threats. The other options seem a bit outdated or labor-intensive.
upvoted 0 times
...
Micaela
9 months ago
Hmm, I'm a bit unsure about this one. The question is asking about the "recommended" way, so I'm not sure if the Perl script or manual update options might be better in some cases. I'll need to think this through a bit more.
upvoted 0 times
...
Gretchen
9 months ago
This seems like a pretty straightforward question. I think the best approach is to go with option C - storing the updates on an intermediary server and pointing all the firewalls to it. That way, you can ensure consistency and centralized management of the updates.
upvoted 0 times
...
Janey
9 months ago
Okay, let me see. I think the key here is that the question is asking about external suppliers who may not be using PRINCE2. That makes me think it's probably Managing Product Delivery, since that's the process that deals with the delivery of products, even if they're coming from outside the PRINCE2 framework.
upvoted 0 times
...
Leontine
2 years ago
But wouldn't storing updates on an intermediary server and pointing all firewalls to it be more efficient?
upvoted 0 times
...
Charlena
2 years ago
Haha, a Perl script? What is this, the 90s? D is clearly the most efficient choice here.
upvoted 0 times
...
Kenda
2 years ago
D, hands down. I ain't got time to be running Perl scripts or checking for updates myself. Let the firewall do its thing!
upvoted 0 times
Albert
2 years ago
True, but manual pushing updates to Crewall sounds like a lot of work. Dynamic updates seem more efficient.
upvoted 0 times
...
Georgeanna
2 years ago
I think storing updates on an intermediary server and pointing all firewalls to it could also be a good option.
upvoted 0 times
...
Wenona
2 years ago
Agreed, dynamic updates with an aggressive schedule is the way to go for sure.
upvoted 0 times
...
Susana
2 years ago
D, hands down. I ain't got time to be running Perl scripts or checking for updates myself. Let the firewall do its thing!
upvoted 0 times
...
...
Titus
2 years ago
I agree with Tanesha, it ensures the firewalls have the most current set of signatures.
upvoted 0 times
...
Candida
2 years ago
B is the way to go. I trust my team to stay on top of the latest updates and push them out when needed.
upvoted 0 times
Argelia
2 years ago
Storing updates on an intermediary server could also work, as long as it is regularly updated with the latest signatures.
upvoted 0 times
...
Elza
2 years ago
I think using dynamic updates would be more efficient in ensuring that the firewalls have the most current set of signatures.
upvoted 0 times
...
Leonida
2 years ago
I agree, manual updates give us more control over when the updates are pushed out.
upvoted 0 times
...
...
Tanesha
2 years ago
I think the recommended way is to use dynamic updates with an aggressive schedule.
upvoted 0 times
...
Melissa
2 years ago
I'll have to go with C. An intermediary server just makes sense for managing updates across multiple firewalls.
upvoted 0 times
Helga
2 years ago
I prefer monitoring update announcements and manually pushing updates.
upvoted 0 times
...
Walton
2 years ago
Running a Perl script to check for updates sounds like a good idea.
upvoted 0 times
...
Alecia
2 years ago
I think using dynamic updates with an aggressive schedule is the best option.
upvoted 0 times
...
Soledad
2 years ago
I agree, having a central server for updates is efficient.
upvoted 0 times
...
...
Bulah
2 years ago
Definitely D. Automatic updates are the way to go. Who has time to manually check for updates these days?
upvoted 0 times
Doretha
2 years ago
I think D is the best choice too. It saves time and ensures the firewalls are always up-to-date.
upvoted 0 times
...
Fernanda
2 years ago
Agreed, D is definitely the most efficient option.
upvoted 0 times
...
...

Save Cancel