Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 445

An administrator notices that an interface configuration has been overridden locally on a firewall. They require all configuration to be managed from Panorama and overrides are not allowed.

What is one way the administrator can meet this requirement?

Answer options

• A. Reload the running configuration and perform a Firewall local commit.
• B. Perform a commit force from the CLI of the firewall.
• C. Perform a template commit push from Panorama using the “Force Template Values” option.
• D. Perform a device-group commit push from Panorama using the “Include Device and Network Templates” option.

Correct answer: C

Explanation

The correct answer, C, allows the administrator to enforce Panorama's configurations on the firewall by pushing template values and overriding any local changes. Options A and B do not address the requirement to manage configurations solely through Panorama, while option D is more focused on device groups rather than templates, which do not specifically enforce template values.