The correct answer is:
C. Automatically "download only" and then install Applications and Threats later, after the administrator approves the update.
Explanation:
Palo Alto Networks firewalls allow administrators to schedule Applications and Threats dynamic updates while delaying the installation of the update. This is useful for testing or ensuring updates do not disrupt production environments.
The "download only" option allows the firewall to download the latest Applications and Threats update but does not automatically install it. The administrator can then manually install the update at a later time after reviewing or testing it.
A, as the question asks for delaying the whole update:
https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/software-and-content-updates/best-practices-for-app-and-threat-content-updates/best-practices-mission-critical.html
B is not relevant as it would disable the automatic updates.
C involves manual/admin action to install the update which is not "certain amount of time".
D would not delay the install of the content update, but disable the new Apps from it.
Correct answer is A.
Enter how long after a release to wait before performing a content update in the Threshold (Hours) field. In rare instances, errors in content updates may be found. For this reason, you may want to delay installing new updates until they have been released for a certain number of hours.
None of the options are perfect in my opinion. There are two thresholds that can be set in a schedule - Threshold (hours) which is the time to wait when a new app and threat update is available before taking the action (download only or download and install) or New App-ID Threshold (hours) which delays the installation.
I think the question need to be worded more clearly. If it auto-install A, if it wait for approval C.
This is verbatim from their website.
"Schedule content updates so that they download-and-install automatically. Then, set a Threshold that determines the amount of time the firewall waits before installing the latest content. In a security-first network, schedule a six to twelve hour threshold."
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
rocioha
Highly Voted 4 years agoNico1973
Most Recent 2 weeks, 5 days agoPoBratsky
4 months, 3 weeks agoconfusion
6 months, 1 week agoMarshpillowz
6 months, 1 week agoashmeow
2 years, 7 months agotenebrox
2 years, 9 months agoMeko
2 years, 9 months agoasdasd123123iu
2 years, 12 months agorischa
3 years, 1 month agoconfusion
3 years, 1 month agolgkhan
3 years, 4 months agor0ze
3 years, 5 months agor0ze
3 years, 5 months agobluejl
3 years, 8 months agoTrung2735
3 years, 7 months agoSMahaldar
3 years, 8 months agokerberos
3 years, 9 months agoutahman3431
4 years ago