nerdexam
Palo_Alto_Networks

PCNSE · Question #757

An engineer needs to configure a standardized template for all Panorama-managed firewalls. These settings will be configured on a template named "Global" and will be included in all template stacks…

The correct answer is B. SSL decryption exclusion D. Login banner E. Dynamic updates. A Panorama template named "Global" can standardize various firewall configurations across managed devices, including SSL decryption exclusions, login banners, and dynamic update settings.

Submitted by rachelw· Apr 18, 2026Deploy and Configure

Question

An engineer needs to configure a standardized template for all Panorama-managed firewalls. These settings will be configured on a template named "Global" and will be included in all template stacks. Which three settings can be configured in this template? (Choose three.)

Options

  • ALog Forwarding profile
  • BSSL decryption exclusion
  • CTags
  • DLogin banner
  • EDynamic updates

How the community answered

(64 responses)
  • A
    5% (3)
  • B
    89% (57)
  • C
    6% (4)

Why each option

A Panorama template named "Global" can standardize various firewall configurations across managed devices, including SSL decryption exclusions, login banners, and dynamic update settings.

ALog Forwarding profile

While Log Forwarding Profiles can be defined in templates, they are typically applied through Log Forwarding policy rules, which might be specific to device groups rather than universally in a 'Global' template for *all* aspects.

BSSL decryption exclusionCorrect

SSL decryption exclusion policies are configured within templates to define traffic that should not be subject to SSL decryption, ensuring consistent policy application across managed firewalls.

CTags

Tags are metadata labels that can be defined in templates, but their application is typically within security policies, making them less of a direct 'setting' configured in a global template compared to B, D, and E.

DLogin bannerCorrect

A login banner is a global device setting that can be standardized across all managed firewalls by configuring it within a Panorama template.

EDynamic updatesCorrect

Dynamic update settings, such as server, schedule, and actions for content, antivirus, and other updates, can be centrally managed and pushed via a Panorama template.

Concept tested: Panorama template configuration scope

Source: https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/templates-and-template-stacks/templates-and-template-stacks

Topics

#Panorama#Templates#Global Configuration#Device Management

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice