PCNSE Exam QuestionsBrowse all questions from this exam

PCNSE Exam - Question 399


In order to fulfill the corporate requirement to back up the configuration of Panorama and the Panorama-managed firewalls securely which protocol should you select when adding a new scheduled config export?

Show Answer
Correct Answer: AD

To securely back up the configuration of Panorama and the Panorama-managed firewalls, SCP (Secure Copy Protocol) should be selected. SCP ensures that the data transfer is encrypted, which provides the necessary security for sensitive configuration data. Unlike options such as FTP, which is not secure, SCP uses SSH to encrypt both the authentication information and the file data. HTTPS is generally used for securing web communication, not for file transfer protocols in scheduled config exports.

Discussion

8 comments
Sign in to comment
chrisy042Option: D
Nov 25, 2022

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/administer-panorama/manage-panorama-and-firewall-configuration-backups/schedule-export-of-configuration-files

confusionOption: D
Dec 4, 2022

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-web-interface-help/panorama-web-interface/panorama-scheduled-config-export "Select the protocol to use to export logs from Panorama to a remote host. Secure Copy (SCP) is a secure protocol; FTP is not."

obatelOption: D
Nov 29, 2022

D: SCP definitely

mz101Option: D
Dec 1, 2022

Yes, should be D, SCP.

SarbiOption: D
Dec 29, 2022

SCP is the right answer

blahblah1234567890000Option: D
May 8, 2023

SCP is the protocol to use.

MarshpillowzOption: D
Feb 3, 2024

D - SCP

123XYZTOption: D
Jul 9, 2024

D A is incorrect, https is not a valid option