A company has a Panorama deployment with multiple device groups. They need to enforce a new corporate-wide security policy that applies to all firewalls, but they also have specific policies for different business units. What is the correct way to structure this in Panorama?

Create a separate template for the corporate-wide policy

Create a 'Shared' device group for the corporate-wide policy and separate device groups for each business unit's specific policies

Create a separate Panorama instance for the corporate-wide policy

Create a single device group with all policies and use rules to differentiate between business units

An administrator is configuring Panorama for a new deployment. They have a mix of firewall models, including PA-400 and PA-5200 series. They want to use a single template to manage common network settings, but they know that some settings are model-specific. What is the best way to handle this in Panorama?

Use a single template and configure all settings in it, including model-specific ones

Create a separate template for each firewall model and manually apply them

Use device groups to manage model-specific settings

Use template stacks to layer model-specific settings on top of a common template

An organization's Panorama management server is a single point of failure. They want to ensure that if the primary Panorama fails, a secondary Panorama can take over management of the firewalls with minimal disruption. What should they configure?

A second Panorama in a different region, with firewalls configured to failover manually

Panorama High Availability (HA) with an active/passive pair

Strata Cloud Manager to manage the firewalls as a backup

A log collector configured to also act as a Panorama

In a hybrid environment, how can Panorama and Strata Cloud Manager coexist?

SCM must be managed by Panorama

Panorama manages on-premises firewalls while SCM manages cloud-delivered SASE components

Panorama must be migrated to SCM before any SASE components are deployed

They cannot coexist; you must choose one platform

Palo Alto NetworksCertified Network Security Professional

Domain 2Objective 4

2.4 Explain the Functionality of Panorama and Strata Cloud Manager (SCM) for Managing Strata and SASE Solutions NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 4)

Part of the NGFW and SASE Solution Functionality domain, which accounts for 13% of the NETWORK-SECURITY-PROFESSIONAL exam.

34questions here

7free pages

9concepts

13%of the exam

Questions 16–20

16application · medium
A company has a Panorama deployment with multiple device groups. They need to enforce a new corporate-wide security policy that applies to all firewalls, but they also have specific policies for different business units. What is the correct way to structure this in Panorama?
Select an answer first
17expert · hard
An administrator is configuring Panorama for a new deployment. They have a mix of firewall models, including PA-400 and PA-5200 series. They want to use a single template to manage common network settings, but they know that some settings are model-specific. What is the best way to handle this in Panorama?
Select an answer first
18application · medium
An organization's Panorama management server is a single point of failure. They want to ensure that if the primary Panorama fails, a secondary Panorama can take over management of the firewalls with minimal disruption. What should they configure?
Select an answer first
19foundation · easy
In Panorama, which construct is used to group firewalls that share the same security policy rules?
Select an answer first
20foundation · easy
In a hybrid environment, how can Panorama and Strata Cloud Manager coexist?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-PROFESSIONAL” is a trademark of its owner, used for identification only.

2.4 Explain the Functionality of Panorama and Strata Cloud Manager (SCM) for Managing Strata and SASE Solutions NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 4)

Questions 16–20

A company has a Panorama deployment with multiple device groups. They need to enforce a new corporate-wide security policy that applies to all firewalls, but they also have specific policies for different business units. What is the correct way to structure this in Panorama?

An organization's Panorama management server is a single point of failure. They want to ensure that if the primary Panorama fails, a secondary Panorama can take over management of the firewalls with minimal disruption. What should they configure?

In Panorama, which construct is used to group firewalls that share the same security policy rules?

In a hybrid environment, how can Panorama and Strata Cloud Manager coexist?

Keep studying — NGFW and SASE Solution Functionality