NetSec-Pro Platform Solutions Services And Tools Practice Test 3 — 15 Questions

Question 1

When migrating from Panorama to SCM, what happens to the existing log data stored on the Panorama appliance?

Accepted Answer

It remains on the Panorama appliance and must be archived manually.. Migrating from Panorama to Strata Cloud Manager (SCM) migrates configuration objects and policies, but it does not migrate the log data stored on the Panorama appliance. Logs remain on Panorama's local storage (or its external log collectors) and must be archived or exported manually if retention is required. SCM does not ingest or take ownership of existing Panorama log records.

Answer

It is automatically moved to SCM storage.

Answer

It is purged immediately upon successful migration.

Answer

It is exported as a CSV file to the administrator's desktop.

Question 2

An administrator is unable to push a configuration to a firewall managed by Panorama. The error message indicates a 'Template conflict'. What is the most likely cause?

Accepted Answer

The Template Stack order is incorrectly configured, causing overlapping values.. A template conflict usually occurs when a setting is defined in both the Device-level configuration and the Panorama Template stack without proper stack ordering.

Answer

The Panorama license has expired.

Answer

The firewall is in maintenance mode.

Answer

The device group is locked by another administrator.

Question 3

Which feature in Strata Cloud Manager allows you to verify that a configuration change complies with security best practices before it is pushed to devices?

Accepted Answer

Commit Validation. The 'Commit Validation' or 'Pre-check' feature in SCM identifies potential issues before they are deployed.

Answer

Policy Optimizer

Answer

App-ID Dependency Check

Answer

Configuration Audit

Question 4

Where do you generate a 'Device Deployment' token for adding a new firewall to Strata Cloud Manager?

Accepted Answer

SCM Inventory/Device Management. The SCM dashboard provides the 'Add Device' or 'Deployment' section to generate tokens for secure device registration.

Answer

Customer Support Portal

Answer

Local Firewall CLI

Answer

Panorama Settings

Question 5

Which tool in the Palo Alto Networks ecosystem is best suited for centralized visibility and reporting across an entire enterprise?

Accepted Answer

Panorama. Panorama is the primary tool for centralized management, visibility, and logging (when used with Panorama Logging).

Answer

Cortex XDR

Answer

Threat Vault

Answer

Customer Support Portal

Question 6

You are configuring 'Log Forwarding' from Panorama to an external SIEM. Which object must you define in Panorama to facilitate this?

Accepted Answer

Log Forwarding Profile. Panorama log forwarding to an external SIEM is configured by attaching a Log Forwarding Profile to a log forwarding destination. The Log Forwarding Profile defines which log types are forwarded, the filter, and the target server (Syslog, SNMP, email, HTTP, etc.). Without this profile, Panorama has no rule set that tells it what to send and where.

Answer

Log Collector Profile

Answer

Reporting Profile

Answer

External Service Profile

Question 7

You are troubleshooting an issue where a specific Threat Prevention profile is not applying correctly via Panorama. The setting is configured in a Template, but the firewall shows a different value. What should you check?

Accepted Answer

The order of the templates within the Template Stack.. In Panorama, when a setting is defined in a Template, the value that reaches the firewall is determined by the Template Stack order — the template listed highest in the stack takes precedence, and lower templates' conflicting values are overridden. If the firewall shows a different value than expected, the most likely cause is that another template higher in the stack is overriding the setting. Checking the order of templates within the Template Stack is therefore the correct first step.

Answer

The local device group lockdown setting.

Answer

The Panorama log collector status.

Answer

The firewall's OS version compatibility.

Question 8

Which SCM feature allows you to view the health status of your entire global firewall deployment?

Accepted Answer

Dashboard. The SCM 'Dashboard' provides a high-level overview, including device health and connectivity status.

Answer

Report Generator

Answer

Device Inventory

Answer

Policy Monitor

Question 9

What is the primary function of the 'Panorama' context in the Web UI of a managed firewall?

Accepted Answer

To view read-only policies and objects pushed from Panorama.. When a firewall is managed by Panorama, the 'Panorama' menu context allows you to view pushed policies and configuration objects.

Answer

To configure local security policies.

Answer

To change the Panorama server IP address.

Answer

To initiate a direct sync request to Panorama.

Question 10

An administrator notices that the 'Commit' progress on Panorama hangs at 99%. What is the most effective way to troubleshoot this?

Accepted Answer

Check the 'Tasks' menu in Panorama for detailed error logs on the specific job.. The task manager in Panorama shows the status of ongoing jobs, and clicking on the job ID reveals detailed logs of the push process.

Answer

Reboot the Panorama appliance.

Answer

Clear the configuration cache on the firewall.

Answer

Increase the timeout value in Management Settings.

Question 11

You are using SCM to manage firewall policies. You want to audit who made a specific change to a security policy rule. Which feature should you use?

Accepted Answer

Audit Logs / Configuration Logs. The 'Audit Log' or 'Configuration Log' in SCM tracks all changes, including the timestamp and the administrator who performed the action.

Answer

System Logs

Answer

Threat Logs

Answer

Device Health Logs

Question 12

You need to create a global address object that is available to all firewalls managed by Panorama. Where should you define this?

Accepted Answer

In the 'Shared' device group.. Shared objects are defined in the 'Shared' device group to make them available across all devices.

Answer

In the local firewall's Address tab.

Answer

In the root Template stack.

Answer

In the Policy Optimizer.

Question 13

When a firewall is managed by Panorama, where is the authoritative configuration stored?

Accepted Answer

On the Panorama appliance.. Panorama serves as the central management point, making its configuration the 'source of truth' for managed devices.

Answer

On the local firewall only.

Answer

In the cloud-based license portal.

Answer

On each firewall's local storage independently.

Question 14

You are managing firewalls across multiple time zones using Panorama. Where do you configure the time zone for the managed firewalls?

Accepted Answer

In a Panorama Template.. Time zone settings are part of the Device configuration, which is managed via Panorama Templates.

Answer

In the global system settings of Panorama.

Answer

In the Device Group settings.

Answer

In the log forwarding profile.

Question 15

Which THREE types of information are contained in the Panorama 'Device Health' report?

Accepted Answer

CPU utilization. The Panorama 'Device Health' report surfaces resource-level telemetry from managed firewalls, and it explicitly includes CPU utilization (A), disk space utilization (B), and memory usage (C) as its core metrics, since these three resource dimensions are what the report is designed to monitor for capacity and performance troubleshooting. CPU utilization (A) is correct because the report tracks processor load on the managed devices. Disk space utilization (B) is correct because the report shows storage consumption so administrators can detect low-disk conditions. Memory usage (C) is correct because the report monitors RAM consumption on the firewalls. Security policy hit counts (D) are not part of Device Health; that data appears in policy/rule usage and traffic logs, not the health report. Active user count (E) is also not included, as user/session information comes from other monitoring views such as the ACC or user activity logs rather than the Device Health report.

Answer

Security policy hit counts

Answer

Active user count