Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 146

Which action would an administrator take to ensure that a service object will be available only to the selected device group?

Answer options

• A. ensure that disable override is selected
• B. uncheck the shared option
• C. ensure that disable override is cleared
• D. create the service object in the specific template

Correct answer: B

Explanation

The correct answer is B, as unchecking the shared option makes the service object accessible only to the specified device group, preventing availability to other groups. Option A is incorrect because selecting disable override does not restrict access; it allows for broader availability. Option C is also incorrect, as clearing disable override alone does not ensure exclusivity. Option D is irrelevant to the question since creating a service object in a specific template does not inherently limit its access to only one device group.