Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 315

An auditor is evaluating the configuration of Panorama and notices a discrepancy between the Panorama template and the local firewall configuration.

When overriding the firewall configuration pushed from Panorama, what should you consider?

Answer options

• A. Only Panorama can revert the override.
• B. The modification will not be visible in Panorama.
• C. Panorama will update the template with the overridden value.
• D. The firewall template will show that it is out of sync within Panorama.

Correct answer: B

Explanation

The correct answer is B because when you override a configuration on the firewall, that change does not get reflected back to Panorama, making the modification invisible to it. Options A and C are incorrect as they suggest that Panorama can revert changes or update the template, which is not the case. Option D is also wrong because the local changes do not indicate a sync issue within Panorama, rather they simply remain unreported.