Refer to the screenshots. Without the ability to use Context Switch, where do admin accounts need to be configured in order to provide admin access to Panorama and to the managed devices?

Question

Exhibit

Options

• AThe Panorama section overrides the Device section. The accounts need to be configured only in
• BThe sections are independent. The accounts need to be configured in both the Device and
• CThe Device section overrides Panorama section. The accounts need to be configured only in the
• DConfiguration in the sections is merged together. The accounts need to be configured in either

• A
  79% (26)
• B
  12% (4)
• C
  3% (1)
• D
  6% (2)

Explanation

Option A is correct because in Panorama, the Panorama section administrator accounts carry top-level authority that extends down to managed devices - configuring accounts there is sufficient to grant access to both Panorama itself and the firewalls it manages, without requiring a separate entry in the Device section.

Why the distractors are wrong:

• B is wrong because the sections are not independent and equal - Panorama-level accounts supersede device-level accounts, so double-entry is unnecessary
• C reverses the hierarchy - the Device section does not override Panorama; it's the other way around
• D is wrong because the configurations are not simply merged; there is a defined override precedence (Panorama wins), not a union of both sections

Memory tip: Think "top-down authority" - Panorama sits above managed devices in the management hierarchy, so admin accounts defined at the Panorama level naturally flow downward to devices. Whoever controls the top controls everything below it.

No community discussion yet for this question.