PCNSE · Question #452
Refer to the diagram. An administrator needs to create an address object that will be useable by the NYC, MA, CA and WA device groups. Where will the object need to be created within the device-group
The correct answer is B. US. To make an address object usable by device groups NYC, MA, CA, and WA, it must be created in the 'US' device group, which is the lowest common ancestor to all specified groups in the hierarchy.
Question
Refer to the diagram. An administrator needs to create an address object that will be useable by the NYC, MA, CA and WA device groups. Where will the object need to be created within the device-group hierarchy?
Options
- AAmericas
- BUS
- CEast
- DWest
How the community answered
(36 responses)- A3% (1)
- B75% (27)
- C14% (5)
- D8% (3)
Why each option
To make an address object usable by device groups NYC, MA, CA, and WA, it must be created in the 'US' device group, which is the lowest common ancestor to all specified groups in the hierarchy.
While creating the object in 'Americas' would also make it available to the target groups, 'US' is a more specific and appropriate common ancestor for these particular groups, minimizing broader applicability if not needed.
Creating the address object in the 'US' device group makes it accessible to all its descendant device groups, including 'East' (NYC, MA) and 'West' (CA, WA), fulfilling the requirement.
Creating the object in the 'East' device group would only make it available to NYC and MA, not to CA and WA.
Creating the object in the 'West' device group would only make it available to CA and WA, not to NYC and MA.
Concept tested: Panorama device group hierarchy and object inheritance
Source: https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/panorama/manage-firewalls-with-device-groups/device-group-hierarchies.html
Topics
Community Discussion
No community discussion yet for this question.