Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)

Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)
A . Full set of APIs enabling programmatic control of policy and configuration
B . VXLAN support for network-layer abstraction
C . Dynamic Address Groups to adapt Security policies dynamically
D . NVGRE support for advanced VLAN integration

View Answer

Answer: A, C

Explanation:

The two elements of the Palo Alto Networks platform architecture that enable security orchestration in a software-defined network (SDN) are:

Full set of APIs enabling programmatic control of policy and configuration

Dynamic Address Groups to adapt Security policies dynamically

The Palo Alto Networks platform architecture consists of four key elements: natively integrated security technologies, full set of APIs, cloud-delivered services, and centralized management. The full set of APIs enables programmatic control of policy and configuration across the platform, allowing for automation and integration with SDN controllers and orchestration tools. Dynamic Address Groups are objects that represent groups of IP addresses based on criteria such as tags, regions, interfaces, or user-defined attributes. Dynamic Address Groups allow Security policies to adapt dynamically to changes in the network topology or workload characteristics without requiring manual updates. VXLAN support for network-layer abstraction and NVGRE support for advanced VLAN integration are not elements of the Palo Alto Networks platform architecture, but they are features that support SDN deployments.

Reference: Palo Alto Networks Certified Software Firewall Engineer (PCSFE), [Palo Alto Networks Platform Architecture], [API Overview], [Dynamic Address Groups Overview]