Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam PCNSE topic 1 question 186 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 186
Topic #: 1
[All PCNSE Questions]

When overriding a template configuration locally on a firewall, what should you consider?

  • A. Panorama will update the template with the overridden value.
  • B. The firewall template will show that it is out of sync within Panorama.
  • C. Only Panorama can revert the override.
  • D. Panorama will lose visibility into the overridden configuration.
Show Suggested Answer Hide Answer
Suggested Answer: D ūüó≥ÔłŹ

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
DenskyDen
7 months, 3 weeks ago
D. Definitely. I already experience this.
upvoted 3 times
...
DenskyDen
7 months, 3 weeks ago
Selected Answer: D
D. Definitely. I already experience this.
upvoted 1 times
...
dogeatdog
9 months ago
same as #421
upvoted 1 times
...
lol12
10 months, 4 weeks ago
Selected Answer: D
D for me unless revert is not the same as force template back to FW... https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/templates-and-template-stacks
upvoted 2 times
...
TAKUM1y
11 months, 2 weeks ago
Selected Answer: D
https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/templates-and-template-stacks
upvoted 2 times
...
UFanat
1 year, 3 months ago
Selected Answer: D
Commit with force template values will override any setting made locally.
upvoted 1 times
...
Abu_Muhammad
1 year, 5 months ago
Selected Answer: B
I think it is B. Losing visibility doesn't it mean that it will not be able to manage it any more?!
upvoted 1 times
lol12
10 months, 4 weeks ago
It's D. From admin guide - Templates and Template Stacks. When you override a setting on the firewall, the firewall saves that setting to its local configuration and Panorama no longer manages the setting.
upvoted 2 times
...
...
bartbernini
1 year, 7 months ago
Selected Answer: D
The correct answer is D. "When you override a setting on the firewall, the firewall saves that setting to its local configuration and Panorama no longer manages the setting." "If you push a configuration with Force Template Values enabled, all overridden values on the firewall are replaced with values from the template. Before you use this option, check for overridden values on the firewalls to ensure your commit does not result in any unexpected network outages or issues caused by replacing those overridden values." Although this doesn't explicitly indicate that you lose visibility, it definitely implies by advising you to check local firewall settings before forcing template values. https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/templates-and-template-stacks.html https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/panorama-web-interface/panorama-commit-operations.html
upvoted 3 times
...
rischa
1 year, 7 months ago
Ans: B .... As per PCNSE study guide When you override the setting on the firewall, the firewall saves that setting to its local configuration and panorama no longer manages the setting.
upvoted 1 times
...
drrealest
1 year, 9 months ago
it is A , Panorama allows you to override values a firewall received from a template and will let you know its a local value after youve changed it https://docs.paloaltonetworks.com/panorama/9-0/panorama-admin/manage-firewalls/manage-templates-and-template-stacks/override-a-template-setting/override-a-template-setting-on-the-firewall.html
upvoted 2 times
drrealest
1 year, 9 months ago
sorry B
upvoted 1 times
...
...
Mucho9999
1 year, 9 months ago
Selected Answer: D
D is correct
upvoted 2 times
...
Micutzu
1 year, 9 months ago
Based on my knowledge out-of-sync message appear on Panorama only was perform a commit to Panorama but not pushed to the NGFW. https://live.paloaltonetworks.com/t5/general-topics/reason-for-out-of-sync-message-in-panorama/td-p/328292 The override setting are not visible (known) by Panorama. The config are pushed only from Panorama to NGFW. I believe the correct answer is D.
upvoted 1 times
...
Plato22
1 year, 9 months ago
Should be D.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...