Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam PCNSE topic 1 question 68 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 68
Topic #: 1
[All PCNSE Questions]

Which three steps will reduce the CPU utilization on the management plane? (Choose three.)

  • A. Disable SNMP on the management interface.
  • B. Application override of SSL application.
  • C. Disable logging at session start in Security policies.
  • D. Disable predefined reports.
  • E. Reduce the traffic being decrypted by the firewall.
Show Suggested Answer Hide Answer
Suggested Answer: ACD 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Edu147
Highly Voted 4 years, 9 months ago
Correct A,C,D B and E are a data plane function.
upvoted 25 times
tester12
4 years, 7 months ago
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleLCAS
upvoted 6 times
...
...
asmaam
Highly Voted 4 years ago
Correct ans = ACD
upvoted 7 times
...
Marshpillowz
Most Recent 2 months, 3 weeks ago
Selected Answer: ACD
A, C and D are correct.
upvoted 1 times
...
JMIB
1 year, 8 months ago
Correct Answer: ACD (Only Disable) A. Disable C. Disable D. Disable
upvoted 2 times
...
evdw
2 years, 11 months ago
Correct Answer : A, C, D
upvoted 3 times
...
TIDUARTE
3 years ago
Work experience. CDE
upvoted 2 times
Raikin
3 years ago
E is data plane
upvoted 1 times
...
vj77
2 years, 11 months ago
How do you encrypt/decrypt data on mgmt plane?
upvoted 4 times
...
...
Rasta2
3 years, 3 months ago
Answers shoud be A,C,D. B is out of discution; I don't think it's E because from the study guide: "Every Palo Alto Networks firewall assigns a minimum of these functions to the management plane: • Configuration management • Logging • Reporting functions • User-ID agent process • Route updates • Signature Match Processor: • All Content-ID and App-ID services • Security Processors: • Session management • Encryption and decryption <====Data Plane • Compression and decompression • Policy enforcement • Network Processor: • Route • ARP • MAC lookup • QoS • NAT • Flow control"
upvoted 4 times
...
ochc
3 years, 4 months ago
CDE - "PA-32xx and above (so All 5k, 7k etc) does SSL decryption in hardware. PA-2xx, PA-8xx and PA30xx are software. This means your MP CPU usage is expected.'' ref https://www.reddit.com/r/paloaltonetworks/comments/8s9gay/ssl_decryption_causing_high_management_plane_cpu/e0xuo5i/
upvoted 1 times
...
hpbdcb
3 years, 4 months ago
correct is: CDE
upvoted 1 times
...
lol1000
3 years, 5 months ago
ACD correct
upvoted 1 times
...
kamikaze
3 years, 7 months ago
i think the correct answer is CDE, because in this article : https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleLCAS there is only mention to disable logging for snmp, not to disable SNMP. imagine if you disable SNMP on management interface, how you get snmp from HA device ? it will never happen on secondary firewall. and this article: https://live.paloaltonetworks.com/t5/general-topics/ssl-decryption-and-load-on-management-plane/td-p/236408 tells that decryption will using management plan, and will increase load of management plan.
upvoted 3 times
...
KAAK
3 years, 8 months ago
ACD https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleLCAS
upvoted 4 times
...
Ahmad_Zahran
4 years ago
Correct A,C,D
upvoted 5 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...