4.2 Troubleshoot Runtime and Commit / Push Errors NETWORK-SECURITY-ANALYST Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A Panorama administrator is pushing a template change that modifies the management interface IP address of a firewall. The push succeeds, but the firewall becomes unreachable from Panorama. The administrator needs to restore management access. What is the MOST efficient way to resolve this issue?

   • AWait for Panorama to automatically revert the change after a timeout
   • BReboot the firewall from Panorama using the 'reboot' command
   • CUse the console port to access the firewall and load the previous configuration
   • DUse SSH to the firewall's dataplane interface to access the CLI
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A Panorama administrator is pushing a configuration to a firewall, but the push fails with 'Commit failed: configuration locked by another administrator.' The administrator checks Panorama and sees no active locks. What is the MOST likely cause of this error?

   • APanorama has a stale lock that was not released after a previous session
   • BThe firewall is not connected to Panorama
   • CThe template or device group has a validation error
   • DThe firewall has a local administrator session that has locked the configuration
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A Panorama administrator pushes a template change to a group of firewalls. The push succeeds for most firewalls, but two firewalls in the group fail with the error 'Commit failed on device: Template validation failed.' The administrator checks the template and sees a new interface configuration. What should the administrator do to resolve the push error?

   • ARemove the two firewalls from the device group and re-add them
   • BCheck the two firewalls for local configuration that conflicts with the template's interface settings
   • CReboot the two firewalls to clear any pending template locks
   • DDisable the template on Panorama and push only the device group
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   After committing a new security policy, an administrator notices that all traffic to the internet is being blocked. The administrator needs to restore service immediately while preserving the ability to investigate the failed change. What is the MOST appropriate action?

   • ADisable the security policy rulebase and commit the change
   • BEdit the new policy rule to allow all traffic and commit the change
   • CLoad a previous configuration snapshot using the 'load config' command and commit it
   • DReboot the firewall to revert to the last committed configuration
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An administrator is committing a new security policy rule to a firewall. The commit fails with the message 'Error: Invalid reference: address object 'WEB_SERVER' is referenced but not defined.' The administrator knows the object was created earlier. What is the most likely cause of this commit error?

   • AThe administrator is committing from Panorama, but the object only exists on the local firewall
   • BThe address object name contains a special character that is not supported in policy rules
   • CThe firewall's dataplane is temporarily unavailable, preventing the object from being written to the running config
   • DThe address object was created in a different virtual system or shared scope than the policy rule
   Reveal Solution Discussion Select an answer first