PCNSE · Question #690
An engineer is configuring a template in Panorama which will contain settings that need to be applied to all firewalls in production. Which three parts of a template an engineer can configure? (Choose
The correct answer is A. Service Route Configuration C. NTP Server Address E. Authentication Profile. Panorama templates are used to manage device-specific and network-related configurations that are common across a group of firewalls.
Question
An engineer is configuring a template in Panorama which will contain settings that need to be applied to all firewalls in production. Which three parts of a template an engineer can configure? (Choose three.)
Options
- AService Route Configuration
- BDynamic Address Groups
- CNTP Server Address
- DAntivirus Profile
- EAuthentication Profile
How the community answered
(41 responses)- A90% (37)
- B2% (1)
- D7% (3)
Why each option
Panorama templates are used to manage device-specific and network-related configurations that are common across a group of firewalls.
Service route configurations, which dictate how the firewall's management plane traffic egresses, are a device-specific network setting managed within templates.
Dynamic Address Groups are security policy objects, which are managed at the device group level, not within templates.
NTP server addresses are device-specific settings for time synchronization and are therefore configured within templates.
Antivirus profiles are security profiles applied to security policies, and thus they are typically configured within device groups.
Authentication profiles define how the firewall authenticates users for management or VPN access, which are device-level configurations suitable for templates.
Concept tested: Panorama template configuration scope
Source: https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/device-groups-and-templates/device-groups-and-templates-overview
Topics
Community Discussion
No community discussion yet for this question.