Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 482

A firewall engineer needs to patch the company’s Palo Alto Networks firewalls to the latest version of PAN-OS. The company manages its firewalls by using Panorama. Logs are forwarded to Dedicated Log Collectors, and file samples are forwarded to WildFire appliances for analysis.

What must the engineer consider when planning deployment?

Answer options

• A. Only Panorama and Dedicated Log Collectors must be patched to the target PAN-OS version before updating the firewalls.
• B. Panorama, Dedicated Log Collectors, and WildFire appliances must have the target PAN-OS version downloaded, after which the order of patching does not matter.
• C. Panorama, Dedicated Log Collectors, and WildFire appliances must be patched to the target PAN-OS version before updating the firewalls.
• D. Only Panorama must be patched to the target PAN-OS version before updating the firewalls.

Correct answer: C

Explanation

The correct answer is C because all components, including Panorama, Dedicated Log Collectors, and WildFire appliances, must be on the same target PAN-OS version to ensure compatibility and proper functioning. Options A and D are incorrect as they exclude necessary components, and option B is wrong because the order of patching does matter for maintaining proper operation.