In a Collector Group with multiple Log Collectors, enabling redundancy ensures that:

Before upgrading a Palo Alto Networks firewall to a new PAN-OS version, which preliminary step is crucial to ensure a smooth upgrade process?

When creating a Log Forwarding profile on a PAN-OS firewall to direct logs to various external and internal systems, which set of methods is available?

A government agency needs to ensure that all user web access is explicitly mediated and authenticated. The agency has the following requirements:
- Client browsers must be manually configured to send traffic to the
firewall's IP address and a specific port.
- The firewall must support seamless single sign-on (SSO) with the
users' existing Active Directory credentials.
Which feature set should the engineer configure to meet the agency's requirements?

Which statement applies to the relationship between Panorama-pushed Security policy and local firewall Security policy?