nerdexam
Palo_Alto_Networks

PCNSA · Question #342

A Panorama administrator would like to create an address object for the DNS server located in the New York City office, but does not want this object added to the other Panorama managed firewalls…

The correct answer is D. Ensure that the Shared option is cleared. In Panorama, checking the 'Shared' option makes an object available across all device groups and all managed firewalls. To restrict an address object to only the firewalls belonging to a specific device group (such as the NYC office group), the administrator must ensure the…

Submitted by kim_seoul· Apr 18, 2026Managing Objects

Question

A Panorama administrator would like to create an address object for the DNS server located in the New York City office, but does not want this object added to the other Panorama managed firewalls. Which configuration action should the administrator take when creating the address object?

Options

  • ATag the address object with the New York Office tag.
  • BEnsure that Disable Override is cleared.
  • CEnsure that the Shared option is checked.
  • DEnsure that the Shared option is cleared.

How the community answered

(22 responses)
  • B
    5% (1)
  • C
    9% (2)
  • D
    86% (19)

Explanation

In Panorama, checking the 'Shared' option makes an object available across all device groups and all managed firewalls. To restrict an address object to only the firewalls belonging to a specific device group (such as the NYC office group), the administrator must ensure the Shared option is cleared (unchecked) and create the object within only the target device group. Tagging has no bearing on which firewalls receive the object, and 'Disable Override' controls whether local firewalls can override the object, not its distribution scope.

Topics

#Panorama#Address Objects#Object Scope#Device Groups

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice