Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 463

An engineer needs to configure a standardized template for all Panorama-managed firewalls. These settings will be configured on a template named "Global" and will be included in all template stacks.

Which three settings can be configured in this template? (Choose three.)

Answer options

• A. Log Forwarding profile
• B. SSL decryption exclusion
• C. Tags
• D. Login banner
• E. Dynamic updates

Correct answer: B, D, E

Explanation

The correct answer includes settings that are applicable at the template level for Panorama-managed firewalls. SSL decryption exclusion, Login banner, and Dynamic updates can be set in the 'Global' template, whereas Log Forwarding profile and Tags are not template-level settings and are typically defined at the device group level.