Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 240

Which Security policy set should be used to ensure that a policy is applied first?

Answer options

• A. Local firewall policy
• B. Shared pre-rulebase
• C. Parent device-group pre-rulebase
• D. Child device-group pre-rulebase

Correct answer: B

Explanation

The Shared pre-rulebase is the correct answer because it allows for policies to be applied before any specific device-group rules, ensuring they take priority. The Local firewall policy, Parent device-group pre-rulebase, and Child device-group pre-rulebase do not provide the same level of precedence as the Shared pre-rulebase.