Site templates are fundamental to automating and scaling Prisma SD-WAN deployments.

Option C is correct because templates are integral to the Zero Touch Provisioning (ZTP) workflow. They allow an administrator to pre-stage configurations for numerous sites within the controller. These configurations act as "device shells," which are claimed by the physical ION devices upon connection, enabling rapid and consistent site rollouts without manual intervention at the branch.

Option D is correct within the context of automation and best practices for large-scale management. While the controller does not maintain a persistent link between a site and its template after creation, templates are used for lifecycle management. Administrators can modify a master template (e.g., a Jinja2 file) and use automation tools to push the updated configuration to existing sites via the Prisma SD-WAN API.

A. This statement is incorrect. Prisma SD-WAN explicitly supports the use of Jinja2 templates, which allow for advanced logic, including conditional statements, to create dynamic and flexible site configurations.

B. This is incorrect because the ION software version is not a mandatory template variable. Software versions are managed globally through software upgrade policies assigned to sites, not within the site creation template itself.

1. Palo Alto Networks Prisma SD-WAN Administrator's Guide, "Site and Device Templates": This section details the use of templates for creating multiple sites with similar configurations. It explicitly mentions, "For advanced configuration, you can use Jinja2 templates to create sites," which refutes option A. It also states, "Once a site is created from a template, it is no longer associated with the template," which highlights why API-based methods (as described for option D) are necessary for updates.

2. Palo Alto Networks Prisma SD-WAN Administrator's Guide, "Zero Touch Provisioning for ION Devices": This section describes the ZTP process, which relies on pre-provisioning sites. The guide explains how an ION device can be "auto-claimed to a pre-provisioned site in the controller." This pre-provisioned site is the "device shell" created from a template, supporting option C.

3. Palo Alto Networks Developer Portal, Prisma SD-WAN API Reference Guide, "Update a site": The API documentation specifies endpoints such as PUT /api/sdwan/v4.5/api/sites/{siteid}. This endpoint allows for the programmatic update of an entire site's configuration. This capability is the foundation for the automation workflow described in option D, where an updated template is processed by a script to generate a new configuration that is then applied via the API.