PCNSE · Question #743
An engineer configures a new template stack for a firewall that needs to be deployed. The template stack should consist of four templates arranged according to the diagram. Which template values…
The correct answer is C. Values in efw01ab.chi. In a Panorama template stack, the values configured in the template lowest in the stack hierarchy override settings from templates higher up, defining the final configuration applied to the firewall.
Question
An engineer configures a new template stack for a firewall that needs to be deployed. The template stack should consist of four templates arranged according to the diagram. Which template values will be configured on the firewall if each template has an SSL/TLS Service profile configured named Management?
Exhibit
Options
- AValues in Global Settings
- BValues in Datacenter
- CValues in efw01ab.chi
- DValues in Chicago
How the community answered
(44 responses)- A2% (1)
- B5% (2)
- C86% (38)
- D7% (3)
Why each option
In a Panorama template stack, the values configured in the template lowest in the stack hierarchy override settings from templates higher up, defining the final configuration applied to the firewall.
Values in 'Global Settings' would be at a higher level in the stack and thus overridden by more specific templates below it.
Values in 'Datacenter' would be overridden by templates lower in the stack, such as 'Chicago' or 'efw01ab.chi', assuming a typical hierarchy.
In a Panorama template stack, the template positioned at the bottom of the stack takes precedence for configuration values. Therefore, `efw01ab.chi`, being the most specific or lowest-level template in the implied hierarchy, will dictate the final SSL/TLS Service profile named Management configured on the firewall.
Values in 'Chicago' would be overridden by the most specific template, 'efw01ab.chi', which is positioned below it in the stack.
Concept tested: Panorama template stack precedence
Source: https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/template-stacks/templates-and-template-stacks
Topics
Community Discussion
No community discussion yet for this question.