nerdexam
Palo_Alto_Networks

PCNSE7 · Question #52

PCNSE7 Question #52: Real Exam Question with Answer & Explanation

The correct answer is B. show panoramas-status D. topdump filter "host 10.10.10.5. B: The show panorama-status command shows the Panorama connection status. The following command shows information about the Panorama connection. username@hostname> show panorama-status Panorama Server 1 : 10.1.7.90 username@hostname> The Managed Devices show not connected to Pano

Question

The company's Panorama server (IP 10.10.10.5) is not able to manage a firewall that was recently deployed. The firewall's dedicated management port is being used to connect to the management network. Which two commands may be used to troubleshoot this issue from the CLI of the new firewall? (Choose two)

Options

  • Atest panoramas-connect 10.10.10.5
  • Bshow panoramas-status
  • Cshow arp all I match 10.10.10.5
  • Dtopdump filter "host 10.10.10.5
  • Edebug dataplane packet-diag set capture on

Explanation

B: The show panorama-status command shows the Panorama connection status. The following command shows information about the Panorama connection. username@hostname> show panorama-status Panorama Server 1 : 10.1.7.90 username@hostname> The Managed Devices show not connected to Panorama and are not able to establish a new connection to Panorama. The Packet Capture on Panorama Management Interface shows SYN packets received from devices on port 3978, but no SYN ACK is sent from Panorama. > tcpdump filter "port 3978" > view-pcap mgmt-pcap mgmt.pcap https://live.paloaltonetworks.com/t5/Management-Articles/Managed-Devices-Unable-to-Establish- Connections-to-Panorama/ta-p/53248 documentation/pan-os-5x/CLI_Reference_Guide-Panorama-5.1_PAN-OS-5.0.pdf

Community Discussion

No community discussion yet for this question.

Full PCNSE7 Practice