Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 182

When overriding a template configuration locally on a firewall, what should you consider?

Answer options

• A. Panorama will update the template with the overridden value.
• B. The firewall template will show that it is out of sync within Panorama.
• C. Only Panorama can revert the override.
• D. Panorama will lose visibility into the overridden configuration.

Correct answer: D

Explanation

Answer D is correct because overriding a configuration on the firewall locally prevents Panorama from tracking those changes, leading to a loss of visibility. Option A is incorrect as Panorama does not update templates with overridden values. Option B is wrong because the firewall will indicate it is out of sync but that doesn't relate directly to the visibility issue. Option C is misleading since while Panorama manages templates, local overrides can often be reverted directly on the device.