PCNSE · Question #663
An auditor has requested that roles and responsibilities be split inside the security team. Group A will manage templates, and Group B will manage device groups inside Panorama. Which two specific fir
The correct answer is B. Security rules D. Address objects. In Panorama, device groups manage security policies and objects like address objects, whereas templates manage network-related configurations and device settings.
Question
An auditor has requested that roles and responsibilities be split inside the security team. Group A will manage templates, and Group B will manage device groups inside Panorama. Which two specific firewall configurations will Group B manage? (Choose two.)
Options
- ARouting
- BSecurity rules
- CInterfaces
- DAddress objects
How the community answered
(61 responses)- A7% (4)
- B75% (46)
- C18% (11)
Why each option
In Panorama, device groups manage security policies and objects like address objects, whereas templates manage network-related configurations and device settings.
Routing configurations (static routes, routing profiles) are typically managed within templates in Panorama because they are specific to the device's network configuration.
Security rules are managed at the device group level in Panorama, allowing for consistent policy application across firewalls within that group.
Interface configurations (IP addresses, zones, link settings) are also managed within templates, as they pertain to the physical or logical network setup of a device.
Address objects are global objects referenced by security policies and are therefore managed within device groups.
Concept tested: Panorama Device Group vs. Template configuration scope
Source: https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/device-groups-and-templates/device-groups-and-templates-overview
Topics
Community Discussion
No community discussion yet for this question.