Examice

Exam PCNSE All QuestionsBrowse all questions from this exam

Question 593

A firewall engineer needs to patch the company’s Palo Alto Networks firewalls to the latest version of PAN-OS. The company manages its firewalls by using Panorama. Logs are forwarded to Dedicated Log Collectors, and file samples are forwarded to WildFire appliances for analysis.

What must the engineer consider when planning deployment?

Only Panorama and Dedicated Log Collectors must be patched to the target PAN-OS version before updating the firewalls.

Panorama, Dedicated Log Collectors, and WildFire appliances must have the target PAN-OS version downloaded, after which the order of patching does not matter.

Panorama, Dedicated Log Collectors, and WildFire appliances must be patched to the target PAN-OS version before updating the firewalls.

Only Panorama must be patched to the target PAN-OS version before updating the firewalls.

Correct Answer: C

When planning the deployment of a PAN-OS upgrade, it is necessary to update Panorama, Dedicated Log Collectors, and WildFire appliances to the target PAN-OS version before updating the firewalls. This ensures compatibility and stability in managing and analyzing logs and samples. Proper order of updates is crucial in maintaining a seamless integration across these network components.

Discussion

CandydaivdOption: C

https://www.examtopics.com/exams/palo-alto-networks/pcnse/view/60/#

poiuytrOption: C

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os "When upgrading firewalls that you manage with Panorama or firewalls that are configured to forward content to a WildFire appliance, you must first upgrade Panorama and its Log Collectors and then upgrade the WildFire appliance before you upgrade the firewalls."