Which two settings can be configured only locally on the firewall and not pushed from a Panorama template stack? (Choose two.)

The correct answer is A. HA1 IP Address B. Master Key. You can use Templates and Template Stacks to define a wide array of settings but you can perform the following tasks only locally on each managed firewall: Configure a device block list. Enable operational modes such as normal mode, multi-vsys mode, or FIPS-CC mode. Configure the

Submitted by kim_seoul· Apr 18, 2026Deploy and Configure

Question

Options

AHA1 IP Address
BMaster Key
CZone Protection Profile
DNetwork Interface Type

How the community answered

(49 responses)

A
82% (40)
C
12% (6)
D
6% (3)

Explanation

You can use Templates and Template Stacks to define a wide array of settings but you can perform the following tasks only locally on each managed firewall: Configure a device block list. Enable operational modes such as normal mode, multi-vsys mode, or FIPS-CC mode. Configure the IP addresses of firewalls in an HA pair. Configure a master key and diagnostics. Compare configuration files (Config Audit). Renaming a vsys on a multi-vsys firewall. https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/manage- templates-and-template-stacks/template-capabilities-and-exceptions

Topics

#Panorama Management#Local Configuration#High Availability (HA)#Master Key

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice