Which three steps will reduce the CPU utilization on the management plane? (Choose three.)
Which three steps will reduce the CPU utilization on the management plane? (Choose three.)
To reduce CPU utilization on the management plane, you should disable SNMP on the management interface, disable logging at session start in Security policies, and disable predefined reports. Disabling SNMP helps reduce management traffic. Disabling logging at session start reduces the logging overhead. Disabling predefined reports decreases the reporting workload. Other options involve data plane functions, such as application override of SSL application and reducing traffic being decrypted by the firewall, and thus do not directly impact the management plane’s CPU utilization.
Correct A,C,D B and E are a data plane function.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleLCAS
Correct ans = ACD
Correct A,C,D
Answers shoud be A,C,D. B is out of discution; I don't think it's E because from the study guide: "Every Palo Alto Networks firewall assigns a minimum of these functions to the management plane: • Configuration management • Logging • Reporting functions • User-ID agent process • Route updates • Signature Match Processor: • All Content-ID and App-ID services • Security Processors: • Session management • Encryption and decryption <====Data Plane • Compression and decompression • Policy enforcement • Network Processor: • Route • ARP • MAC lookup • QoS • NAT • Flow control"
ACD https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleLCAS
Correct Answer : A, C, D
i think the correct answer is CDE, because in this article : https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleLCAS there is only mention to disable logging for snmp, not to disable SNMP. imagine if you disable SNMP on management interface, how you get snmp from HA device ? it will never happen on secondary firewall. and this article: https://live.paloaltonetworks.com/t5/general-topics/ssl-decryption-and-load-on-management-plane/td-p/236408 tells that decryption will using management plan, and will increase load of management plan.
Correct Answer: ACD (Only Disable) A. Disable C. Disable D. Disable
Work experience. CDE
E is data plane
How do you encrypt/decrypt data on mgmt plane?
A, C and D are correct.
CDE - "PA-32xx and above (so All 5k, 7k etc) does SSL decryption in hardware. PA-2xx, PA-8xx and PA30xx are software. This means your MP CPU usage is expected.'' ref https://www.reddit.com/r/paloaltonetworks/comments/8s9gay/ssl_decryption_causing_high_management_plane_cpu/e0xuo5i/
correct is: CDE
ACD correct