PCNSE · Question #581
Refer to the exhibit. Based on the screenshots above, what is the correct order in which the various rules are deployed to firewalls inside the DATACENTER_DG device group?
The correct answer is A. shared pre-rules. This question asks for the deployment order of rules within a Panorama device group, specifically identifying the position of shared pre-rules.
Question
Refer to the exhibit. Based on the screenshots above, what is the correct order in which the various rules are deployed to firewalls inside the DATACENTER_DG device group?
Exhibit
Options
- Ashared pre-rules
- Bshared pre-rules
- Cshared pre-rules
- Dshared pre-rules
How the community answered
(49 responses)- A92% (45)
- C2% (1)
- D6% (3)
Why each option
This question asks for the deployment order of rules within a Panorama device group, specifically identifying the position of shared pre-rules.
Shared pre-rules are always deployed first to managed firewalls from Panorama, taking precedence over device group-specific pre-rules, post-rules, and shared post-rules. This ensures that the most critical, globally applicable security policies are enforced at the highest priority across all managed firewalls.
Concept tested: Panorama rule deployment order
Source: https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/device-groups/pre-and-post-rules.html
Topics
Community Discussion
No community discussion yet for this question.