Exam PCNSA topic 1 question 377 discussion

B. Panorama is a centralized management tool for Palo Alto Networks firewalls, and it allows administrators to configure and manage both pre-rules and local device rules for managed firewalls. C. Pre-rules are part of the security policy and can be viewed on managed firewalls. They define policies for traffic before it is matched against security policy rules. Option A is incorrect because pre-rules are typically managed and modified in Panorama, not on individual firewalls. Panorama administrators can modify pre-rules, but the local administrator on a firewall usually doesn't modify pre-rules directly. Option D is incorrect because pre-rules can be modified in Panorama, and local device rules can also be modified in Panorama for centralized management. Local device rules are specific to the individual firewall but can still be managed through Panorama.

Options B and C

bc . .