PCNSE practice question 20 of 35
Which template values will be configured on the firewall if each template has an SSL to be deployed. The template stack should consist of four templates arranged according to the diagram. Which template values will be configured on the firewall if each template has an SSL/TLS Service profile configured named Management?
Full set: 377 questionsDomain Deploy and Configure
In a Panorama template stack, configurations are applied based on their order in the stack. If the same object, identified by name (in this case, the SSL/TLS Service Profile "Management"), exists in multiple templates, the configuration from the last template in the stack takes precedence and overrides the settings from all preceding templates. The names provided (Global Settings, Datacenter, Chicago, efwOlab.chi) imply a standard hierarchy from general to specific. In a logically constructed stack, the most specific template, efwOlab.chi, would be placed last. Therefore, its values are the ones that will be configured on the firewall.
A. Values in Datacenter: This is incorrect because, in a logical hierarchy, its settings would be overridden by the more specific Chicago and efwOlab.chi templates.
C. Values in Global Settings: This is incorrect as it is the most general template. Its settings would be overridden by all other templates in the stack.
D. Values in Chicago: This is incorrect because the efwOlab.chi template is more specific. In a standard hierarchical stack, its settings would override those from the Chicago template.
1. Palo Alto Networks Panorama Administrator's Guide 11.0: In the section "Manage Configuration with Templates and Template Stacks," under "Template Stacks," the guide states: "If the same setting is defined in multiple templates in a stack, the setting in the last template in the stack (the template at the bottom of the list) overrides the settings in templates that precede it (templates that are higher in the list)." This principle directly supports the answer, as the most specific template (efwOlab.chi) would logically be last in the stack.
2. Palo Alto Networks Panorama Administrator's Guide 10.2: The section "Template Stacks" provides the same rule for precedence: "Panorama evaluates templates and template stacks in order from top to bottom. If the same setting is defined in multiple templates in a stack, the setting in the last template in the stack...overrides the settings in templates that precede it." This confirms that the final template's values are what get applied.
Keep practicing
Take the free PCNSE practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PCNSE practice questions
- Question 1A customer would like to support Apple Bonjour in their environment for ease of configura…
- Question 2A superuser is tasked with creating administrator accounts for three contractors. For com…
- Question 3An engineer configures SSL decryption in order to have more visibility to the internal us…
- Question 4An administrator needs to build Security rules in a Device Group that allow traffic to sp…
- Question 5How should an administrator enable the Advance Routing Engine on a Palo Alto Networks fir…
- Question 6A firewall engineer needs to update a company's Panorama-managed firewalls to the latest …
