Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 283

An administrator would like to reference the same address object in Security policies on 100 Panorama managed firewalls, across 10 devices groups and five templates.

Which configuration action should the administrator take when creating the address object?

Answer options

• A. Ensure that Disable Override is cleared.
• B. Ensure that the Shared option is cleared.
• C. Ensure that the Shared option is checked.
• D. Tag the address object with the Global tag.

Correct answer: C

Explanation

The correct answer is C because checking the Shared option allows the address object to be used across different device groups and templates in the Panorama managed environment. Options A and B would restrict the usage of the address object, while option D is unnecessary for sharing the object across multiple firewalls.