Palo_Alto_NetworksPalo_Alto_Networks
PCNSA · Question #275
PCNSA Question #275: Real Exam Question with Answer & Explanation
The correct answer is B: Shared pre-rulebase. The Shared pre-rulebase ensures that policies are applied first because it is processed before any other rulebases (device-group or local) on the firewall.
Submitted by kavita_s· Apr 18, 2026Policy Evaluation and Management
Question
Which Security policy set should be used to ensure that a policy is applied first?
Options
- ALocal firewall policy
- BShared pre-rulebase
- CParent device-group pre-rulebase
- DChild device-group pre-rulebase
Explanation
The Shared pre-rulebase ensures that policies are applied first because it is processed before any other rulebases (device-group or local) on the firewall.
Common mistakes.
- A. Local firewall policies are processed last, after Shared and Device Group policies, so they would not be applied first.
- C. Parent device-group pre-rulebase policies are processed after the Shared pre-rulebase, but before child device-group or local policies, meaning they are not applied first overall.
- D. Child device-group pre-rulebase policies are processed after Shared and parent device-group policies, meaning they are not applied first.
Concept tested. Security policy rulebase hierarchy
Topics
#Policy Order#Panorama#Rulebase Hierarchy#Policy Management
Community Discussion
No community discussion yet for this question.