Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 583

What are three tasks that cannot be configured from Panorama by using a template stack? (Choose three.)

Answer options

• A. Rename a vsys on a multi-vsys firewall
• B. Change the firewall management IP address
• C. Enable operational modes such as normal mode, multi-vsys mode, or FIPS-CC mode
• D. Add administrator accounts
• E. Configure a device block list

Correct answer: A, C, E

Explanation

The correct options are A, C, and E because these tasks involve specific configurations that must be handled directly on the firewall rather than through Panorama’s template stack. Options B and D can be configured from Panorama, as they fall under settings that can be managed globally across multiple devices.