What are three tasks that cannot be configured from Panorama by using a template stack? (Choose three)

Question

Options

• Aconfigure a device block list
• Brename a vsys on a multi-vsys firewall
• Cenable operational modes such as normal mode, multi-vsys mode, or FIPS-CC mode
• Dadd administrator accounts
• Echange the firewall management IP address

• A
  88% (45)
• D
  4% (2)
• E
  8% (4)

Explanation

Panorama template stacks push device and network configuration to managed firewalls, but certain tasks must be performed locally on the device itself. (A) A device block list is a local management security setting not configurable via template push. (B) Renaming a vsys on a multi-vsys firewall is a locally-executed operational task. (C) Enabling operational modes such as multi-vsys, normal, or FIPS-CC requires local configuration because these modes fundamentally change device behavior and cannot be safely pushed remotely via template. In contrast, (D) adding administrator accounts can be done through Panorama device groups, and (E) the management IP address can be configured using a template (under Device > Setup > Management).

No community discussion yet for this question.