An engineer is deploying multiple firewalls with common configuration in Panorama. What are two benefits of using nested device groups? (Choose two.)

The correct answer is B. Inherit settings from the Shared group D. Inherit parent Security policy rules and objects. In Panorama, nested device groups provide two key inheritance benefits: (1) All device groups (including nested ones) inherit settings from the Shared group, which sits at the top of the hierarchy; and (2) child device groups inherit Security policy rules and objects from their p

Submitted by yaw92· Apr 18, 2026Deploy and Configure

Question

Options

AInherit all Security policy rules and objects
BInherit settings from the Shared group
CInherit IPSec crypto profiles
DInherit parent Security policy rules and objects

How the community answered

(58 responses)

A
3% (2)
B
91% (53)
C
5% (3)

Explanation

In Panorama, nested device groups provide two key inheritance benefits: (1) All device groups (including nested ones) inherit settings from the Shared group, which sits at the top of the hierarchy; and (2) child device groups inherit Security policy rules and objects from their parent device groups, enabling hierarchical policy layering. Choice A is incorrect because child groups do not inherit ALL Security policy rules-only those from their direct parent, not from sibling or unrelated groups. Choice C is incorrect because IPSec crypto profiles are template-based constructs, not device-group objects.

Topics

#Panorama#Device Groups#Configuration Inheritance#Policy Management

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice