A.

VM-100, VM-200, VM-300. VM-500. VM-1000-HV

https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/about-the-vm-series-firewall/vm-series-models

A.

Partner Service

D.

Tier-1 insertion

E.

Tier-0 insertion

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-nsx/set-up-the-You can deploy one or more instances of the VM-Series firewall as a partner service in your VMware NSX-T
Data Center. Attach a VM-Series firewall to any tier-0 or tier-1 logical router to protect north-south traffic. You can deploy the VM-Series firewall as standalone service instance or two firewalls in a high-availability (HA) pair. Panorama manages the connection with NSX-T Manager and the VM-Series firewalls deployed in your NSX-T software-defined datacenter

Tier-0 Insertion—Tier-0 insertion deploys a VM-Series firewall to a tier-0 logical router, which
processes traffic between logical and physical networks. When you deploy the VM-Series firewall with
tier-0 insertion, NSX-T Manager uses the deployment information you configured on Panorama to
attach a firewall to a tier-0 logical router in virtual wire mode.
Tier-1 Insertion—Tier-1 insertion deploys a VM-Series firewall to a tier-1 logical router, which
provides downlink connections to segments and uplink connection to tier-0 logical routers. NSX-T
Manager attaches VM-Series firewalls deployed with tier-1 insertions to a tier-1 logical router in virtual
wire mode
After deploying the firewall, you configure traffic redirection rules that send traffic to the VM-Series firewall
when crossing a tier-0 or tier-1 router. Security policy rules that you configure on Panorama are pushed to
managed VM-Series firewalls and then applied to traffic passing through the firewall.

B.

operating expenses

B.

Utilize a separate Load Balancer VM

A.

When the organization requires a greater number of sessions

B.

When a new ESXi host is added to a cluster, a new VM-Series firewall is automatically deployed,
provisioned and available for immediate policy enforcement without any manual intervention

C.

VM-700

on VMware NSX, only the VM-100, VM-200, VM-300, VM-500, and VM-1000-HV firewalls are supported.
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/about-the-vm-series-firewall/vm-series-models.

B.

Arista and Kubernetes are extending secure segmentation with an open API (RESTVJSON)-based
exchange, which allows Kubernetes to federate with CloudVision to extend the micro-segmentation
policy for physical workloads.