Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 171

An administrator has 750 firewalls. The administrator's central-management Panorama instance deploys dynamic updates to the firewalls. The administrator notices that the dynamic updates from Panorama do not appear on some of the firewalls.
If Panorama pushes the configuration of a dynamic update schedule to managed firewalls, but the configuration does not appear, what is the root cause?

Answer options

• A. Panorama does not have valid licenses to push the dynamic updates.
• B. Panorama has no connection to Palo Alto Networks update servers.
• C. Locally-defined dynamic update settings take precedence over the settings that Panorama pushed.
• D. No service route is configured on the firewalls to Palo Alto Networks update servers.

Correct answer: C

Explanation

The correct answer is C because locally-defined dynamic update settings on the firewalls take priority over configurations pushed from Panorama. Options A and B are incorrect as they do not pertain to the local settings issue, and option D is also incorrect since the problem is related to local overrides, not connectivity.