Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 439

To ensure that a Security policy has the highest priority, how should an administrator configure a Security policy in the device group hierarchy?

Answer options

• A. Clone the security policy and add it to the other device groups.
• B. Add the policy to the target device group and apply a master device to the device group.
• C. Reference the targeted device’s templates in the target device group.
• D. Add the policy in the shared device group as a pre-rule.

Correct answer: D

Explanation

The correct answer is D because adding the policy as a pre-rule in the shared device group gives it the highest priority across all device groups. The other options do not ensure the same level of priority or may not apply the policy effectively to all relevant devices.