Exam PCNSE topic 1 question 208 discussion

Another wrong answer. Should be B and C: https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/templates-and-template-stacks

B and C are correct!

B and C

Answers are B, C. Clearly, this is a question about templates, template stacks and variables in Panorama. The key to answering this question is to understand template capabilities and exceptions. You cannot use templates or template stacks to set firewall modes, but as an exception, Panorama can push default vsys settings in a template to firewalls that don't support them or don't have any vsys configured. Since these PANs will be shipped world-wide, you will benefit from the use of variables to serve as placeholder objects based on configuration needs.

Template Variables allow you to assign a dynamic value in a template configuration you can overwrite later in a template stack. This can be particularly useful for IPv4 addresses you do not know value when configuring a template. The IPv4 template variable can be referenced in different parts of the template configuration like in Global Protect configuration. Procedure When you are using IPv4 template variable for Gateway and/or Portal in Global Protect Configuration, you have to be sure this variable is also used to configure IP setting of the physical interface. You have to verify this in Template configuration but also in Template stack configuration. Template stack can contain more than one template, setting IPv4 configuration with conflicting values; the First template applied will prevail. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PO4UCAW

Cannot be A: Virtual systems are separate, logical firewall instances within a single physical Palo Alto Networks firewall. - FWs are being deployed around the world and acting as edge locations on premisis https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/virtual-systems/virtual-systems-overview Cannot be D: Panorama uses Log Collectors to aggregate logs from managed firewalls. When generating reports, Panorama queries the Log Collectors for log information, providing you visibility into all the network activity that your firewalls monitor. https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/centralized-logging-and-reporting/managed-collectors-and-collector-groups A Collector Group is 1 to 16 managed collectors that operate as a single logical log collection unit. Therefore must be B and C which make the most sense

B and C You cannot use templates or template stacks to set firewall modes: multiple virtual systems (multi-vsys) mode

1 : https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/virtual-systems/virtual-systems-overview/benefits-of-virtual-systems //// 2 : https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/templates-and-template-stacks

I believe AB. Scalability is a benefit of Virtual Systems. Allows you to have multiple, separate firewalls in the same physical box. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/virtual-systems/virtual-systems-overview/benefits-of-virtual-systems#idcc37de80-c922-4762-97cf-66516a939cdf

Template stacks and variables should be used. Collector Group is applicable only for panorama logging and make no sense for this question.

B and C are correct

Should be BC.

Virtual systems and Variables don't make any sense with so many firewalls and sites and using panorama.

Should be BC. https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-firewalls/manage-templates-and-template-stacks/configure-template-or-template-stack-variables.html