PCCET Question #133: Real Exam Question with Answer & Explanation

Question

An international organization has more than 100 firewalls in 50 locations. Which Panorama deployment mode would the organization install in multiple locations (beyond the need for disaster recovery)?

Options

• APanorama
• Bmanagement only
• Clog collector
• Dthreat management

Explanation

For an international organization with many firewalls across numerous locations, deploying Panorama log collectors at multiple sites is essential for efficient distributed log aggregation and management.

Common mistakes.

• A. While Panorama is the central management system, deploying a full Panorama instance (which includes management and logging) in multiple locations for log collection purposes would be overkill and inefficient for just log aggregation.
• B. A "management only" Panorama instance primarily handles configuration and policy management and does not specifically address the need for distributed log collection from many firewalls in various locations.
• D. Threat management is a function of the firewalls and Panorama as a whole, not a distinct deployment mode for Panorama instances.

Concept tested. Palo Alto Networks Panorama deployment modes (Log Collector)

Reference. https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/set-up-panorama/plan-your-panorama-deployment/panorama-deployment-modes.html

No community discussion yet for this question.