2.4 Explain the Functionality of Panorama and Strata Cloud Manager (SCM) for Managing Strata and SASE Solutions NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company with an existing Panorama deployment is planning to migrate its remote access VPN users to Prisma Access and manage them with Strata Cloud Manager. However, they want to keep managing their on-prem data center firewalls with Panorama. What is the recommended approach for this hybrid environment?

   • AUse Panorama to manage the on-prem firewalls and SCM to manage Prisma Access, allowing them to coexist
   • BMigrate all management to SCM, including the on-prem firewalls
   • CDeploy a second Panorama instance for Prisma Access and keep the original for on-prem firewalls
   • DMigrate Prisma Access management to Panorama and keep everything in Panorama
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security operations team needs to retain firewall logs for 12 months for compliance. They currently use Panorama with a single log collector that stores logs for 30 days. They are considering moving their remote users to Prisma Access and want to use Strata Cloud Manager for logging. What is the primary consideration for log retention in this new architecture?

   • ASCM provides cloud-based log storage with configurable retention periods that can meet the 12-month requirement
   • BLog retention is not configurable in SCM and is fixed at 30 days
   • CPrisma Access logs are stored locally on the remote user's device and cannot be centrally collected
   • DPanorama log collectors can be configured to store logs for 12 months by simply adding more disk space
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A network administrator manages 15 PA-400 series firewalls across five branch offices. Each office has a unique interface IP scheme, but all firewalls must enforce the same security policy rules. The administrator wants to minimize configuration duplication. What is the most efficient way to achieve this in Panorama?

   • ACreate a unique device group and template for each branch office
   • BUse a single template and a single device group, configuring all interfaces in the template
   • CCreate one template for all firewalls and one device group per branch office
   • DCreate one device group for all firewalls and one template per branch office
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   In Strata Cloud Manager, how are software and content updates typically applied to cloud-managed devices?

   • AUpdates are only available through Panorama
   • BUpdates are applied automatically by the cloud service without administrator intervention
   • CUpdates are not supported for cloud-managed devices
   • DEach device must be updated manually via SSH
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is a key consideration when migrating from Panorama to Strata Cloud Manager?

   • APanorama must be decommissioned immediately
   • BAll on-premises firewalls must be replaced with cloud-delivered firewalls
   • CPolicies and configurations must be recreated or migrated to the SCM environment
   • DSCM cannot manage any on-premises firewalls
   Reveal Solution Discussion Select an answer first