PCNSE practice question 29 of 35
Which three options does Panorama offer for deploying dynamic updates to its managed devices? (Choose three.)
Full set: 377 questionsDomain Deploy and Configure
Panorama provides a centralized interface for managing dynamic updates across multiple firewalls. The primary deployment actions include: Schedules, which automate the download and installation of updates at specified times; Install, which allows an administrator to manually push a specific content version to managed devices on-demand; and Revert content, which provides a critical rollback mechanism to a previous version if a new update introduces issues. These three functions give administrators comprehensive control over the dynamic update deployment lifecycle, from automated rollouts to manual intervention and remediation.
A. Check dependencies: This is an automated background process that Panorama performs before an installation to ensure compatibility, not a user-selectable deployment option.
C. Verify: Integrity verification is an automatic part of the download process to ensure the file is not corrupt. It is not a manual deployment action.
1. Palo Alto Networks PAN-OS® Administrator’s Guide 10.2: In the section on managing updates from Panorama
the guide details the primary actions available.
Install: "To manually install a content update on a firewall
select Device Deployment > Dynamic Updates
locate the update
and click Install." (Paraphrased from the "Install Content Updates on a Firewall" section).
Schedules: "You can configure a recurring schedule for Panorama to retrieve and install new content updates on managed firewalls." (Referenced in the "Schedule Content Updates for a Firewall" section).
Revert content: "If a content update causes issues...you can revert to a previously installed version... In Panorama
select Device Deployment > Dynamic Updates... and for the device you want to revert
click Revert." (Referenced in the "Revert to a Previous Content Version" section).
2. Palo Alto Networks Panorama™ Administrator’s Guide 10.2: The "Deploy Updates to Firewalls and Log Collectors" section explicitly describes the workflow and options. It states
"From Panorama
you can deploy software and content updates to managed firewalls... You can install updates on-demand or create schedules for recurring updates." This section also details the "Revert" capability for content updates as a management action.
Keep practicing
Take the free PCNSE practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PCNSE practice questions
- Question 1A customer would like to support Apple Bonjour in their environment for ease of configura…
- Question 2A superuser is tasked with creating administrator accounts for three contractors. For com…
- Question 3An engineer configures SSL decryption in order to have more visibility to the internal us…
- Question 4An administrator needs to build Security rules in a Device Group that allow traffic to sp…
- Question 5How should an administrator enable the Advance Routing Engine on a Palo Alto Networks fir…
- Question 6A firewall engineer needs to update a company's Panorama-managed firewalls to the latest …
