PCNSE practice question 20 of 35

Which template values will be configured on the firewall if each template has an SSL to be deployed. The template stack should consist of four templates arranged according to the diagram. Which template values will be configured on the firewall if each template has an SSL/TLS Service profile configured named Management?

Full set: 377 questions

Domain Deploy and Configure

Answer options
A: Values in Datacenter
B: Values in efwOlab.chi Correct answer
C: Values in Global Settings
D: Values in Chicago
Correct Answer:
B. Values in efwOlab.chi
Explanation

In a Panorama template stack, configurations are applied based on their order in the stack. If the same object, identified by name (in this case, the SSL/TLS Service Profile "Management"), exists in multiple templates, the configuration from the last template in the stack takes precedence and overrides the settings from all preceding templates. The names provided (Global Settings, Datacenter, Chicago, efwOlab.chi) imply a standard hierarchy from general to specific. In a logically constructed stack, the most specific template, efwOlab.chi, would be placed last. Therefore, its values are the ones that will be configured on the firewall.

Why Incorrect

A. Values in Datacenter: This is incorrect because, in a logical hierarchy, its settings would be overridden by the more specific Chicago and efwOlab.chi templates.
C. Values in Global Settings: This is incorrect as it is the most general template. Its settings would be overridden by all other templates in the stack.
D. Values in Chicago: This is incorrect because the efwOlab.chi template is more specific. In a standard hierarchical stack, its settings would override those from the Chicago template.

References

1. Palo Alto Networks Panorama Administrator's Guide 11.0: In the section "Manage Configuration with Templates and Template Stacks," under "Template Stacks," the guide states: "If the same setting is defined in multiple templates in a stack, the setting in the last template in the stack (the template at the bottom of the list) overrides the settings in templates that precede it (templates that are higher in the list)." This principle directly supports the answer, as the most specific template (efwOlab.chi) would logically be last in the stack.

2. Palo Alto Networks Panorama Administrator's Guide 10.2: The section "Template Stacks" provides the same rule for precedence: "Panorama evaluates templates and template stacks in order from top to bottom. If the same setting is defined in multiple templates in a stack, the setting in the last template in the stack...overrides the settings in templates that precede it." This confirms that the final template's values are what get applied.

Scroll to Top