Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 570 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 570
Topic #: 1

An engineer troubleshoots a Panorama-managed firewall that is unable to reach the DNS servers configured via a global template. As a troubleshooting step, the engineer needs to configure a local DNS server in place of the template value.

Which two actions can be taken to ensure that only the specific firewall is affected during this process? (Choose two.)

A. Override the DNS server on the template stack.
B. Configure the DNS server locally on the firewall.
C. Change the DNS server on the global template.
D. Configure a service route for DNS on a different interface.

Show Suggested Answer

Suggested Answer: AB 🗳️

by Andromeda1800 at Dec. 10, 2023, 11:11 p.m.

Comments

Submit Cancel

corpguy

7 months, 4 weeks ago

Selected Answer: AD

A and D are the two local setting options the would only affect one firewall or HA pair.

upvoted 1 times

corpguy

5 months, 3 weeks ago

I meant, B and D

upvoted 1 times

...

Moadil_001

10 months, 3 weeks ago

Selected Answer: AB

While its not a good practice to configure firewalls locally, cause it will lead to out-of-sync issue with Panorama, A & B remains only available options

upvoted 1 times

...

betko

1 year, 1 month ago

This question was on exam in June 24.

upvoted 3 times

...

evilCorpBot7494

1 year, 5 months ago

Selected Answer: AB

"There are two ways to override values pushed from a template or template stack. The first is to define a value locally on the firewall to override a value pushed from a template or template stack. The second is to define firewall-specific variables to override values pushed from a template or template stack." https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/manage-firewalls/manage-templates-and-template-stacks/override-a-template-setting

upvoted 3 times

...

scanossa

1 year, 5 months ago

Why A? The question says "only the specific firewall". if you modify the template stack you could modify settings on all FW links to that template stack. B is Correct D Could be correct if you make this change locally.

upvoted 1 times

DatITGuyTho1337

6 months, 4 weeks ago

Yes but there were no mention of other firewalls, just the one associated with the template stack that the global template is a part of. So it makes sense to override the stack settings also.

upvoted 1 times

...

Marshpillowz

1 year, 5 months ago

Selected Answer: AB

A and B correct

upvoted 1 times

...

hcir

1 year, 6 months ago

A and B because overriding the value on the stack makes sense if the FW in question is the only one using this stack. Hence only this FW will be affected

upvoted 1 times

...

Orcun1905

1 year, 6 months ago

Last week's exam question dump is 80% maybe more valid

upvoted 1 times

...

aneyas

1 year, 7 months ago

Selected Answer: AB

A and B is the correct answer

upvoted 2 times

...

Andromeda1800

1 year, 7 months ago

Selected Answer: AB

A, B are correct

upvoted 1 times

...

Andromeda1800

1 year, 7 months ago

Selected Answer: AB

In my opinion A and B are correct options. https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/manage-firewalls/manage-templates-and-template-stacks/override-a-template-setting

upvoted 2 times

Sammy3637

1 year, 7 months ago

Agree !You can override a template or template stack value in one of the following ways: Override a Template Value on the Firewall or Override a Template or Template Stack Value Using Variables—There are two ways to override values pushed from a template or template stack. The first is to define a value locally on the firewall to override a value pushed from a template or template stack. The second is to define firewall-specific variables to override values pushed from a template or template stack. Override a Template Value Using a Template Stack—Define values or variables on the template stack to override values pushed from a template.

upvoted 3 times

...