Exam NGFW-Engineer Topic 1 Question 40 Discussion

Basic Concept: CN-Series is Palo Alto Networks' containerized NGFW form factor for Kubernetes. It secures east-west traffic between pods, namespaces, and microservices using Panorama-managed policy.
Why D is Correct: CN-Series firewalls are correct because they are built for Kubernetes insertion, unlike Panorama RBAC or automation modules, which manage or deploy but do not inspect microservice traffic.
Why A is Wrong: Service graph is a valid Palo Alto Networks or networking concept in another context, but it does not implement the exact configuration outcome required by this question.
Why B is Wrong: Ansible automation modules is a valid Palo Alto Networks or networking concept in another context, but it does not implement the exact configuration outcome required by this question.
Why C is Wrong: Panorama role-based access control (RBAC) is a valid Palo Alto Networks or networking concept in another context, but it does not implement the exact configuration outcome required by this question.