Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 517

A Panorama administrator configures a new zone and uses the zone in a new Security policy. After the administrator commits the configuration to Panorama, which device-group commit push operation should the administrator use to ensure that the push is successful?

Answer options

• A. merge with candidate config
• B. include device and network templates
• C. specify the template as a reference template
• D. force template values

Correct answer: B

Explanation

The correct answer is B because including device and network templates ensures that the new zone configuration is properly applied to the devices. Options A, C, and D do not guarantee that the necessary templates are included, which could lead to an unsuccessful push of the policy changes.