Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 67

Which two settings can be configured only locally on the firewall and not pushed from a Panorama template or template stack? (Choose two.)

Answer options

• A. HA1 IP Address
• B. Master Key
• C. Zone Protection Profile
• D. Network Interface Type

Correct answer: A, B

Explanation

The HA1 IP Address and Master Key must be configured locally on the firewall because they are critical to the functioning and security of the firewall's management and high availability settings. In contrast, the Zone Protection Profile and Network Interface Type can be managed and applied via Panorama templates, allowing for centralized management across multiple devices.