Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 518

An administrator is attempting to create policies for deployment of a device group and template stack. When creating the policies, the zone drop-down list does not include the required zone. What must the administrator do to correct this issue?

Answer options

• A. Add a firewall to both the device group and the template
• B. Add the template as a reference template in the device group
• C. Enable "Share Unused Address and Service Objects with Devices" in Panorama settings
• D. Specify the target device as the master device in the device group

Correct answer: B

Explanation

The correct answer is B because adding the template as a reference template ensures that the necessary zones are available when creating policies. The other options do not directly address the issue of the missing zone in the drop-down list.