View all questions & answers for the Palo Alto Networks Network Security Analyst (NetSec-Analyst) Exam Materials exam


Palo Alto Networks Network Security Analyst (NetSec-Analyst) Exam Materials-Question 47 Discussion
Comment Image Comment Image Comment Image

Following a configuration change, the management interface of a PA-Series NGFW becomes unreachable, and no data plane interface is configured with a management profile. Which troubleshooting step will help identify recent changes? (Choose one answer)

  • A. Access the device via the serial console and use the CLI command show config audit info to identify recent configuration changes.
  • B. Access the device via the serial console and use the CLI command show config diff to compare the running configuration with a saved backup.
  • C. Export a named configuration snapshot and compare it manually using a text editor from the remote management portal.
  • D. Log into an alternate management port and review the commit history via the PAN-OS GUI to pinpoint changes affecting the management interface.
Correct Answer: A

Brave-Dump Clients Votes

B 100%

Comments



Anonymous User 2026-05-01 18:48:30

Selected Answers: B


correct answer is B

The command "show config diff" allows you to compare the current candidate configuration (which likely contains the error) against the running configuration, or compare the running configuration against previously saved versions to pinpoint exactly what changed while "show config audit" info is not a standard PAN-OS command for identifying configuration deltas (it only shows details like config version, job ID, etc)