PCNSE Core Concepts and Architecture Practice Question
Which Panorama deployment mode allows centralized management of firewalls while storing logs locally on each firewall instead of sending them to the Panorama log collector?
⚠ Common exam trap
Candidates often assume Panorama always requires log forwarding for centralized management, confusing the management plane (configuration/policy) with the data plane (logging), and thus overlook the 'without Log Collectors' mode as a valid deployment option.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Panorama without Log Collectors
Panorama without Log Collectors is the correct deployment mode because it allows centralized management of firewalls while keeping logs stored locally on each firewall. In this mode, Panorama handles only configuration and policy management, and log collection is disabled, so no logs are forwarded to Panorama. This is ideal for environments where log retention must remain on the firewall due to compliance or bandwidth constraints.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Panorama with Dedicated Log Collectors
Why it's wrong here
Dedicated Log Collectors receive and store firewall logs centrally, which contradicts the requirement to keep logs on each firewall. It is tempting because dedicated collectors are the standard design for large-scale, high-volume log retention and separate management from logging, but here local storage is mandated.
- ✗
Panorama with Log Collectors
Why it's wrong here
Log Collectors centralise log storage on Panorama or dedicated appliances, so firewall logs would not remain local. This mode suits environments needing long-term, aggregated reporting across many firewalls; the scenario instead requires each firewall to retain its own logs.
- ✓
Panorama without Log Collectors
Why this is correct
Panorama deployed without Log Collectors manages policies and device configuration centrally while each managed firewall retains its own logs in local storage. This satisfies the stem's requirement that logs stay on the firewall rather than being forwarded to Panorama.
- ✗
Panorama in High Availability mode
Why it's wrong here
High Availability mode pairs two Panorama appliances for device and policy redundancy; it does not change where firewalls store logs, which is determined by log collector configuration. It is tempting because HA is a Panorama deployment mode, but the mode that keeps logs on each firewall is Panorama in management-only mode.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSE question from scratch — 319 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.