PCNSE Panorama Management and Logging 2

Question 1

In Panorama, what is the difference between Pre-Rules and Post-Rules in a Device Group?

Accepted Answer

Pre-Rules are evaluated before local firewall rules; Post-Rules are evaluated after

Answer

Pre-Rules are processed before local firewall rules on the managed device, while Post-Rules are processed after local firewall rules, giving administrators control over policy override behavior.

Question 2

What happens when you push a configuration from Panorama to a managed firewall?

Accepted Answer

Panorama-managed policies and templates are committed and activated on the firewall

Answer

A Panorama push commits the centrally managed configurations (policies, objects, templates) to the managed firewall, making them active.

Question 3

Which feature in Panorama allows administrators to group multiple templates to simplify large-scale deployments?

Accepted Answer

Template Stacks

Answer

Template Stacks allow multiple templates to be layered together, with higher-priority templates overriding lower ones, simplifying configuration management for large environments.

Question 4

In Panorama, what does a Collector Group define?

Accepted Answer

A set of Log Collectors that work together to store and manage logs

Answer

A Collector Group is a logical grouping of Log Collectors that share log storage responsibilities and are managed as a unit for log retention and forwarding.

Question 5

What is the maximum number of firewalls a single Panorama M-600 appliance can manage?

Accepted Answer

5,000

Answer

A single Panorama M-600 appliance can manage up to 5,000 devices, making it suitable for large enterprise and service provider deployments.

PCNSE Exam Practice Test

PCNSE Exam Practice Test

PCNSE Panorama Management and Logging 2