PCNSE · Question #804
A firewall administrator manages sets of firewalls which have two unique idle timeout values. Datacenter firewalls needs to be set to 20 minutes and BranchOffice firewalls need to be set to 30 minutes
The correct answer is D. Create two separate template stacks one each for Datacenter and BranchOffice, and verify that. To apply unique idle timeout values to different groups of firewalls using template stacks, the administrator should create a separate template stack for each group.
Question
A firewall administrator manages sets of firewalls which have two unique idle timeout values. Datacenter firewalls needs to be set to 20 minutes and BranchOffice firewalls need to be set to 30 minutes. How can the administrator assign these settings through the use of template stacks?
Options
- ACreate one template stack and place the BranchOffice_Template in higher priority than
- BCreate one template stack and place the Datanceter_Template in higher priority than
- CCreate two separate template stacks one each for Datacenter and BranchOffice, and verify that
- DCreate two separate template stacks one each for Datacenter and BranchOffice, and verify that
How the community answered
(24 responses)- C4% (1)
- D96% (23)
Why each option
To apply unique idle timeout values to different groups of firewalls using template stacks, the administrator should create a separate template stack for each group.
Creating only one template stack would result in a single set of configurations being applied to all firewalls, which would not allow for unique idle timeout values for different groups of firewalls.
Creating only one template stack would result in a single set of configurations being applied to all firewalls, which would not allow for unique idle timeout values for different groups of firewalls.
While creating two separate template stacks is the correct approach, the option is incomplete, unlike option D which fully outlines the necessary action.
Creating two separate template stacks, one for Datacenter firewalls and another for BranchOffice firewalls, allows the administrator to apply unique and distinct idle timeout values to each group without configuration conflicts. Each firewall group would be assigned its specific template stack, ensuring the correct configuration is applied to the intended devices.
Concept tested: Palo Alto Networks Panorama template stack configuration
Source: https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-templates/template-stacks.html
Topics
Community Discussion
No community discussion yet for this question.