View all questions & answers for the Palo Alto Network Security Professional (NetSec-Pro) Exam Materials exam


Question 58 Discussion

Which action allows an engineer to collectively update VM-Series firewalls with Strata Cloud Manager (SCM)? (Choose one answer)

  • A. Creating an update grouping rule
  • B. Scheduling software update
  • C. Creating a device grouping rule
  • D. Setting a target OS version
Correct Answer: A

Brave-Dump Clients Votes

C 50%
A 50%

Comments



aieasa 2025-11-03 00:54:57

Selected Answers: C


In Strata Cloud Manager (SCM), the most effective way for an engineer to collectively update VM-Series firewalls is by:
• Creating a device grouping rule, which allows multiple firewalls to be logically grouped based on attributes like location, role, or configuration profile.
• Once grouped, updates (such as software upgrades, policy changes, or configuration pushes) can be applied consistently and efficiently across all devices in the group.
This approach simplifies management and ensures uniformity across distributed deployments
  • Brave-Dumps Admin 2025-11-03 15:31:12
    I see D is the correct, please write your reference with the answer

Ayesha 2026-02-18 16:38:43

Selected Answers: A


To collectively update VM-Series firewalls using Strata Cloud Manager, an engineer would create a software update grouping rule. This rule allows for the grouping of multiple firewalls to schedule PAN-OS software upgrades for those sets of firewalls.

The process involves:

Creating a Software Update Grouping Rule: This rule is used to group sets of firewalls for scheduled PAN-OS software upgrades. A firewall can only be associated with one software update grouping rule.

Scheduling a Software Update: After creating the grouping rule, a PAN-OS software update can be scheduled to upgrade or downgrade the grouped firewalls to a target PAN-OS version at a specified date and time.

Device labels can also be used to group devices, which simplifies the process of managing multiple devices across distributed environments for software updates . However, the specific action for collectively updating them, including scheduling, is enabled by the "software update grouping rule".