Which information is included in device state other than the local configuration?

Question

Options

• Auncommitted changes
• Baudit logs to provide information of administrative account changes
• Csystem logs to provide information of PAN-OS changes
• Ddevice group and template settings pushed from Panorama

• A
  3% (1)
• B
  3% (1)
• C
  3% (1)
• D
  90% (26)

Explanation

Device state in Palo Alto Networks (PAN-OS/Panorama) refers to a snapshot that captures not just the local device configuration, but also any device group and template settings pushed from Panorama (D) - this is the key distinction, since managed devices receive policy and configuration from Panorama that exists outside the local config file itself.

• A is wrong because uncommitted changes are transient candidate config, not part of the saved device state export.
• B is wrong because audit logs are stored separately and are not bundled into device state; they fall under logging/monitoring infrastructure.
• C is wrong because system logs (syslog/PAN-OS event logs) are operational records, not configuration state - they aren't included in a device state export.

Memory tip: Think of device state as "everything needed to fully reconstruct the device's operational config" - that means the local config plus whatever Panorama pushed. If Panorama controls it, it must be part of the state. Logs and uncommitted changes are "temporary or external," so they don't belong.

No community discussion yet for this question.