Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 466
A firewall engineer needs to update a company’s Panorama-managed firewalls to the latest version of PAN-OS. Strict security requirements are blocking internet access to Panorama and to the firewalls. The PAN-OS images have previously been downloaded to a secure host on the network.
Which path should the engineer follow to deploy the PAN-OS images to the firewalls?
Answer options
- A. Upload the image to Panorama > Device Deployment > Software menu, and deploy it to the firewalls.
- B. Upload the image to Panorama > Device Deployment > Dynamic Updates menu, and deploy it to the firewalls.
- C. Upload the image to Panorama > Software menu, and deploy it to the firewalls.
- D. Upload the image to Panorama > Dynamic Updates menu, and deploy it to the firewalls.
Correct answer: A
Explanation
The correct answer is A because the Software menu under Device Deployment is specifically designed for managing and deploying software updates to the firewalls. Options B, C, and D are incorrect as they do not utilize the appropriate menu for deploying the PAN-OS images effectively under the given security constraints.