An engineer troubleshoots a Panorama-managed firewall that is unable to reach the DNS servers configured via a global template. As a troubleshooting step, the engineer needs to configure a local DNS server in place of the template value.
Which two actions can be taken to ensure that only the specific firewall is affected during this process? (Choose two.)
To ensure that only the specific firewall is affected during the process, configuring the DNS server locally on the firewall and configuring a service route for DNS on a different interface are the appropriate actions. Overriding the DNS server on the template stack or changing the DNS server on the global template would affect any firewalls using that stack or template, which does not satisfy the requirement of affecting only the specific firewall.
"There are two ways to override values pushed from a template or template stack. The first is to define a value locally on the firewall to override a value pushed from a template or template stack. The second is to define firewall-specific variables to override values pushed from a template or template stack." https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/manage-firewalls/manage-templates-and-template-stacks/override-a-template-setting
In my opinion A and B are correct options. https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/manage-firewalls/manage-templates-and-template-stacks/override-a-template-setting
Agree !You can override a template or template stack value in one of the following ways: Override a Template Value on the Firewall or Override a Template or Template Stack Value Using Variables—There are two ways to override values pushed from a template or template stack. The first is to define a value locally on the firewall to override a value pushed from a template or template stack. The second is to define firewall-specific variables to override values pushed from a template or template stack. Override a Template Value Using a Template Stack—Define values or variables on the template stack to override values pushed from a template.
This question was on exam in June 24.
A, B are correct
A and B is the correct answer
Last week's exam question dump is 80% maybe more valid
A and B because overriding the value on the stack makes sense if the FW in question is the only one using this stack. Hence only this FW will be affected
A and B correct
Why A? The question says "only the specific firewall". if you modify the template stack you could modify settings on all FW links to that template stack. B is Correct D Could be correct if you make this change locally.