Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 549

An engineer is pushing configuration from Panorama to a managed firewall.
What happens when the pushed Panorama configuration has Address Object names that duplicate the Address Objects already configured on the firewall?

Answer options

• A. The firewall ignores only the pushed objects that have the same name as the locally configured objects, and it will commit the rest of the pushed configuration.
• B. The firewall rejects the pushed configuration, and the commit fails.
• C. The firewall fully commits all of the pushed configuration and overwrites its locally configured objects.
• D. The firewall renames the duplicate local objects with "-1" at the end signifying they are clones; it will update the references to the objects accordingly and fully commit the pushed configuration.

Correct answer: B

Explanation

The correct answer is B because when there are name conflicts with Address Objects, the firewall will reject the entire pushed configuration to prevent inconsistencies. Options A, C, and D are incorrect as they suggest that the configuration could be partially committed or modified in a way that would not happen in this scenario.