Exam PCNSE topic 1 question 319 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 319
Topic #: 1

A firewall has been assigned to a new template stack that contains both "Global" and "Local" templates in Panorama, and a successful commit and push has been performed. While validating the configuration on the local firewall, the engineer discovers that some settings are not being applied as intended.
The setting values from the "Global" template are applied to the firewall instead of the "Local" template that has different values for the same settings.
What should be done to ensure that the settings in the "Local" template are applied while maintaining settings from both templates?

A. Move the "Local" template above the "Global" template in the template stack.
B. Perform a commit and push with the "Force Template Values" option selected.
C. Override the values on the local firewall and apply the correct settings for each value.
D. Move the "Global" template above the "Local" template in the template stack.

Show Suggested Answer

Suggested Answer: A 🗳️

by bimyo at Oct. 2, 2022, 3:46 p.m.

Comments

Submit Cancel

jam1234

2 years ago

is this even a good question? Ideally both global and local configs should not overlap, so that both global and local templates will get pushed to the FW (with global taking precedence). Admin should modify it this way, and not move the template above which may create more issue when another admin want to apply global policy to all FW.

upvoted 2 times

...

confusion

2 years, 3 months ago

Selected Answer: A

A top template values get applied if you have the same values in bottom template

upvoted 3 times

...

TAKUM1y

2 years, 3 months ago

Selected Answer: A

https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/templates-and-template-stacks

upvoted 2 times

...

Kuronekosama

2 years, 3 months ago

Selected Answer: A

Skip to the end. Top takes priority in the template stack. https://m.youtube.com/watch?v=J40BJtuAf0w

upvoted 3 times

...

west33637

2 years, 3 months ago

the answer should be A. Per this quote in your document link - "Panorama evaluates the templates listed in a stack configuration from top to bottom with higher templates having priority."

upvoted 2 times

...

bimyo

2 years, 4 months ago

so help me understand this better. Does the template that is above (higher) in the GUI configuration take precedence over the lower one or is it the other way around. So does the the LOCAL template have to be above or underneath the GLOBAL one to take precedence. (answer here A or D , thanks! ) https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/templates-and-template-stacks

upvoted 1 times

homersimpson

1 year, 1 month ago

Top one takes precedence, so LOCAL should be over GLOBAL. Thus, answer is A.

upvoted 1 times

...