Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 170

An administrator is considering upgrading the Palo Alto Networks NGFW and central management Panorama version.
What is considered best practice for this scenario?

Answer options

• A. Perform the Panorama and firewall upgrades simultaneously.
• B. Upgrade the firewall first, wait at least 24 hours, and then upgrade the Panorama version.
• C. Upgrade Panorama to a version at or above the target firewall version.
• D. Export the device state, perform the update, and then import the device state.

Correct answer: C

Explanation

The correct answer is C because upgrading Panorama to a version that is at or above the target firewall version ensures compatibility and proper functionality. Option A is incorrect as simultaneous upgrades can lead to issues if problems arise. Option B may introduce delays and is not the best practice. Option D, while it may help with recovery, does not address the version compatibility requirement.