Palo Alto Networks Certified Network Security Consultant (PCNSC) — Question 6

In Expedition, which objects are classified as “Ghost objects”?

Answer options

• A. Address objects that are not part of an Address Group
• B. Address objects that are not applied in Security or NAT policies
• C. Unused address objects
• D. Addresses imported from Security and NAT policies without corresponding address objects.

Correct answer: D

Explanation

Ghost objects in Expedition are specifically those addresses that have been imported from Security and NAT policies but do not have matching address objects. The other options describe different scenarios that do not fit the definition of ghost objects, such as being part of an Address Group or simply unused.