Exam PCNSE topic 1 question 68 discussion

Correct A,C,D B and E are a data plane function.

Correct ans = ACD

A, C and D are correct.

Correct Answer: ACD (Only Disable) A. Disable C. Disable D. Disable

Correct Answer : A, C, D

Work experience. CDE

Answers shoud be A,C,D. B is out of discution; I don't think it's E because from the study guide: "Every Palo Alto Networks firewall assigns a minimum of these functions to the management plane: • Configuration management • Logging • Reporting functions • User-ID agent process • Route updates • Signature Match Processor: • All Content-ID and App-ID services • Security Processors: • Session management • Encryption and decryption <====Data Plane • Compression and decompression • Policy enforcement • Network Processor: • Route • ARP • MAC lookup • QoS • NAT • Flow control"

CDE - "PA-32xx and above (so All 5k, 7k etc) does SSL decryption in hardware. PA-2xx, PA-8xx and PA30xx are software. This means your MP CPU usage is expected.'' ref https://www.reddit.com/r/paloaltonetworks/comments/8s9gay/ssl_decryption_causing_high_management_plane_cpu/e0xuo5i/

correct is: CDE

ACD correct

i think the correct answer is CDE, because in this article : https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleLCAS there is only mention to disable logging for snmp, not to disable SNMP. imagine if you disable SNMP on management interface, how you get snmp from HA device ? it will never happen on secondary firewall. and this article: https://live.paloaltonetworks.com/t5/general-topics/ssl-decryption-and-load-on-management-plane/td-p/236408 tells that decryption will using management plan, and will increase load of management plan.

ACD https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleLCAS

Correct A,C,D