PCNSE Question #873: Real Exam Question with Answer & Explanation

Question

An enterprise network security team is deploying VM-Series firewalls in a multi-cloud environment. Some firewalls are deployed in VMware NSX-V, while others are in AWS, and all are centrally managed using Panorama with the appropriate plugins installed. The team wants to streamline policy management by organizing the firewalls into device groups in which the AWS- based firewalls act as a parent device group, while the NSX-V firewalls are configured as a child device group to inherit Security policies. However, after configuring the device group hierarchy and attempting to push configurations, the team receives errors, and policy inheritance is not functioning as expected. What is the most likely cause of this issue?

Options

• APanorama must use the same plugin version numbers for both AWS and NSX-V environments
• BPanorama requires the objects to be overridden in the child device group before firewalls in
• CPanorama by default does not allow different hypervisors in parent/child device groups, but this
• DPanorama does not support policy inheritance across device groups containing firewalls deployed