PCNSE Question #694: Real Exam Question with Answer & Explanation

Question

After importing a pre-configured firewall configuration to Panorama, what step is required to ensure a commit/push is successful without duplicating local configurations?

Options

• AEnsure Force Template Values is checked when pushing configuration.
• BPush the Template first, then push Device Group to the newly managed firewal.
• CPerform the Export or push Device Config Bundle to the newly managed firewall.
• DPush the Device Group first, then push Template to the newly managed firewall

Explanation

After importing a pre-configured standalone firewall's configuration into Panorama, the correct step is to perform an 'Export or push Device Config Bundle' (Option C) to the newly managed firewall. The Device Config Bundle is a complete, merged configuration that combines the Panorama-managed template and device group settings into a single authoritative push. This replaces the firewall's local configuration cleanly, avoiding duplication or conflicts between Panorama-pushed settings and residual local configurations. Pushing the Template first and then Device Group (B) or Device Group first then Template (D) risks partial overlaps and out-of-order dependencies. Force Template Values (A) alone does not resolve the risk of duplicated local configurations.

No community discussion yet for this question.