Which processing order will be enabled when a Panorama administrator selects the setting `Objects defined in ancestors will take higher precedence?`
Which processing order will be enabled when a Panorama administrator selects the setting `Objects defined in ancestors will take higher precedence?`
When the setting 'Objects defined in ancestors will take higher precedence' is enabled, it means that objects defined at higher levels in the hierarchy (ancestor objects) will override those defined at lower levels (descendant objects). Thus, ancestor objects will have precedence over descendant objects.
Yep Correct C :
https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/manage-device-groups/manage-precedence-of-inherited-objects
I got this question in the exam
By default, when device groups at different levels in the Device Group Hierarchy have an object with the same name but different values (because of overrides, as an example), policy rules in a descendant device group use the object values in that descendant instead of using object values inherited from ancestor device groups. Optionally, you can reverse this order of precedence to push values from the highest ancestor containing the object to all descendant device groups. After you enable this option, the next time you push configuration changes to device groups, the values of inherited objects replace the values of any overridden objects in the descendant device groups.
C is true
Even a person totally ignorant of PA could only come to the conclusion of C or D, just based off the wording of the question. But it's C, descendants are taken to be more particular, and are by default overriding ancestor settings.
https://docs.paloaltonetworks.com/panorama/7-1/panorama-admin/manage-firewalls/manage-precedence-of-inherited-objects
so, B right?
sorry, C is correct
C is correct