Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Engineer (PCNSE) · Palo Alto Networks
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B and C
Answers are B, C. Clearly, this is a question about templates, template stacks and variables in Panorama. The key to answering this question is to understand template capabilities and exceptions. You cannot use templates or template stacks to set firewall modes, but as an exception, Panorama can push default vsys settings in a template to firewalls that don't support them or don't have any vsys configured. Since these PANs will be shipped world-wide, you will benefit from the use of variables to serve as placeholder objects based on configuration needs.
Template Variables allow you to assign a dynamic value in a template configuration you can overwrite later in a template stack. This can be particularly useful for IPv4 addresses you do not know value when configuring a template. The IPv4 template variable can be referenced in different parts of the template configuration like in Global Protect configuration. Procedure When you are using IPv4 template variable for Gateway and/or Portal in Global Protect Configuration, you have to be sure this variable is also used to configure IP setting of the physical interface. You have to verify this in Template configuration but also in Template stack configuration. Template stack can contain more than one template, setting IPv4 configuration with conflicting values; the First template applied will prevail. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PO4UCAW