PCNSE · Question #708
PCNSE Question #708: Real Exam Question with Answer & Explanation
The correct answer is B: Inherit settings from the Shared group. In Panorama, nested device groups provide two key inheritance benefits: (1) All device groups (including nested ones) inherit settings from the Shared group, which sits at the top of the hierarchy; and (2) child device groups inherit Security policy rules and objects from their p
Question
An engineer is deploying multiple firewalls with common configuration in Panorama. What are two benefits of using nested device groups? (Choose two.)
Options
- AInherit all Security policy rules and objects
- BInherit settings from the Shared group
- CInherit IPSec crypto profiles
- DInherit parent Security policy rules and objects
Explanation
In Panorama, nested device groups provide two key inheritance benefits: (1) All device groups (including nested ones) inherit settings from the Shared group, which sits at the top of the hierarchy; and (2) child device groups inherit Security policy rules and objects from their parent device groups, enabling hierarchical policy layering. Choice A is incorrect because child groups do not inherit ALL Security policy rules-only those from their direct parent, not from sibling or unrelated groups. Choice C is incorrect because IPSec crypto profiles are template-based constructs, not device-group objects.
Topics
Community Discussion
No community discussion yet for this question.