An engineer is creating a template and wants to use variables to standardize the configuration across a large number of devices. Which two variable types can be defined? (Choose two.)

Question

Options

• APath group
• BZone
• CIP netmask
• DFQDN

• A
  7% (2)
• B
  4% (1)
• C
  89% (24)

Explanation

When working with Panorama template variables (a Palo Alto Networks concept), the supported variable types are specific data constructs like IP Netmask and FQDN - both of which represent concrete, device-specific values that legitimately differ from device to device and can be substituted at push time. These types map directly to addressable network identifiers, making them ideal candidates for parameterization across a large device fleet.

Path group (A) is not a template variable type - it is a construct used in SD-WAN path selection policy, not a substitutable variable in template configuration. Zone (B) is a firewall policy construct (security zone), and while zones appear in templates, they are not themselves a variable type you can define as a template variable - zone names must be consistent across devices sharing a template.

Memory tip: Think "what uniquely identifies a device on the network?" - its IP address/mask and its hostname/FQDN are the most device-specific values. If the answer choices sound like "things that change per device," they're likely valid variable types; if they sound like "policy constructs," they're probably not.

No community discussion yet for this question.