Exam PCNSE topic 1 question 123 discussion

For Answer C: Both explaning “logging and reporting” are once causing MP high usage TIPS & TRICKS: REDUCING MANAGEMENT PLANE LOAD: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSvCAK TIPS & TRICKS: REDUCING MANAGEMENT PLANE LOAD—PART 2: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClU4CAK

C is correct

Reports are *ALWAYS* management plane, making C the best answer For those saying D, in *some* configurations/firewalls the management plane may be used for SSL decryption.

C is correct

PCNSE Study Guide 2023 1.6 Every Palo Alto Networks firewall assigns a minimum of these functions to the management plane: ● Configuration management ● Logging ● Reporting functions <=== ● User-ID agent process ● Route updates

Correct is C D is not correct as: Identify the functions that reside on the data plane The following functions are assigned to the data plane: ● Signature match processor● All Content-ID and App-ID services● Security processors● Session management ● Encryption and decryption <--------------- Data Plane, No impact on the MGMT plane. ● Compression and decompression ● Policy enforcement● Network processor● Route● Address Resolution Protocol (ARP)● MAC lookup● QoS● NAT● Flow control Ref; Study guide page 50-51

ssl decryption is done in hardware on higher models and on mgm for lower models, so for sure C will have an impact.

SSL Decryption eats up CPU which directly impacts MGT. I'm going with D.

SSL Decryption is done on the MGMT plane. https://live.paloaltonetworks.com/t5/general-topics/where-is-ssl-processing-done-data-plane-or-management-plane/m-p/3722#M2739

C is correct

Correct Answer: C

B or C, not sure

C is the correct answer

Correct answer C