nerdexam
Palo_Alto_Networks

PCNSA · Question #120

What can be achieved by selecting a policy target prior to pushing policy rules from Panorama?

The correct answer is C. You can specify the firewalls m a device group to which to push policy rules. Selecting a policy target in Panorama prior to pushing policy rules allows administrators to specify precisely which firewalls within a device group will receive the new or updated policy rules.

Submitted by cyberguy42· Apr 18, 2026Policy Evaluation and Management

Question

What can be achieved by selecting a policy target prior to pushing policy rules from Panorama?

Options

  • ADoing so limits the templates that receive the policy rules
  • BDoing so provides audit information prior to making changes for selected policy rules
  • CYou can specify the firewalls m a device group to which to push policy rules
  • DYou specify the location as pre can -or post-rules to push policy rules

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    88% (30)
  • D
    3% (1)

Why each option

Selecting a policy target in Panorama prior to pushing policy rules allows administrators to specify precisely which firewalls within a device group will receive the new or updated policy rules.

ADoing so limits the templates that receive the policy rules

Templates manage device-specific configurations like network settings, while policy rules are managed within device groups, so policy targets do not limit template deployment.

BDoing so provides audit information prior to making changes for selected policy rules

Policy targets define the scope of policy deployment, not the provision of audit information, which is typically found in logs and commit histories.

CYou can specify the firewalls m a device group to which to push policy rulesCorrect

When pushing policy rules from Panorama, selecting a policy target enables you to choose specific firewalls within a device group, ensuring that only those designated firewalls receive the updated configuration, rather than all firewalls in the group.

DYou specify the location as pre can -or post-rules to push policy rules

Specifying pre- or post-rules determines the rule's position within the rulebase, and this is independent of selecting a policy target during a push operation.

Concept tested: Panorama policy target deployment

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/panorama/manage-device-groups/push-policy-and-objects-to-managed-firewalls

Topics

#Panorama#Policy Management#Device Groups#Configuration Push

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PCNSA Practice