PCNSA · Question #266
In order to fulfill the corporate requirement to backup the configuration of Panorama and the Panorama-managed firewalls securely, which protocol should you select when adding a new scheduled config…
The correct answer is C. SCP. To securely back up configurations of Panorama and managed firewalls, SCP should be selected for scheduled config exports due to its use of SSH for secure file transfer.
Question
In order to fulfill the corporate requirement to backup the configuration of Panorama and the Panorama-managed firewalls securely, which protocol should you select when adding a new scheduled config export?
Options
- AHTTPS
- BSMB v3
- CSCP
- DFTP
How the community answered
(35 responses)- A3% (1)
- B6% (2)
- C91% (32)
Why each option
To securely back up configurations of Panorama and managed firewalls, SCP should be selected for scheduled config exports due to its use of SSH for secure file transfer.
HTTPS is primarily used for secure web communication and API interactions, not typically for file transfer of configuration backups in this context.
SMB v3 (Server Message Block version 3) is a network file sharing protocol, but SCP is generally preferred for secure, scheduled configuration exports on network devices.
SCP (Secure Copy Protocol) uses SSH for data transfer and authentication, providing a secure method to export and backup configurations to a remote server.
FTP (File Transfer Protocol) transmits data and credentials in plaintext by default, making it insecure for sensitive configuration backups.
Concept tested: Secure configuration backup protocols
Source: https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/manage-configuration-backups/set-up-a-scheduled-configuration-export
Topics
Community Discussion
No community discussion yet for this question.