nerdexam
Palo_Alto_Networks

PCNSE · Question #575

Which feature of Panorama allows an administrator to create a single network configuration that can be reused repeatedly for large-scale deployments even if values of configured objects, such as…

The correct answer is A. template variables. Panorama's template variables feature allows administrators to define placeholders within templates, enabling a single configuration to be reused across many firewalls with unique settings for each device.

Submitted by andres_qro· Apr 18, 2026Deploy and Configure

Question

Which feature of Panorama allows an administrator to create a single network configuration that can be reused repeatedly for large-scale deployments even if values of configured objects, such as routes and interface addresses, change?

Options

  • Atemplate variables
  • Bthe 'Shared' device group
  • Ctemplate stacks
  • Da device group

How the community answered

(28 responses)
  • A
    96% (27)
  • C
    4% (1)

Why each option

Panorama's template variables feature allows administrators to define placeholders within templates, enabling a single configuration to be reused across many firewalls with unique settings for each device.

Atemplate variablesCorrect

Template variables in Panorama allow an administrator to define dynamic placeholders (e.g., {{var_ip_address}}, {{var_hostname}}) within configuration templates. These variables are then assigned specific, unique values per firewall or per template stack, enabling a single template to be deployed to numerous devices with varying network parameters without requiring individual template modifications for each device.

Bthe 'Shared' device group

The 'Shared' device group applies common security and network configurations across *all* managed firewalls but does not provide a mechanism for varying specific configuration values per individual device.

Ctemplate stacks

Template stacks allow combining multiple templates into a single logical unit for deployment, but they do not inherently provide the variability required for unique object values across many devices without the additional use of template variables.

Da device group

A device group is used to apply common security and network policy configurations to a group of firewalls, but it doesn't offer a direct method for individual device-specific network object variations across the group in the same way template variables do.

Concept tested: Panorama Template Variables for Scalable Configuration

Source: https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/manage-templates/template-variables

Topics

#Panorama#Template Variables#Configuration Management#Scalability

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice