How can an administrator use the Panorama device-deployment option to update the apps and threat version of an HA pair of managed firewalls?

How can an administrator use the Panorama device-deployment option to update the apps and threat version of an HA pair of managed firewalls?
A . Configure the firewall’s assigned template to download the content updates.
B. Choose the download and install action for both members of the HA pair in the Schedule object.
C. Switch context to the firewalls to start the download and install process.
D. Download the apps to the primary; no further action is required.

Answer: B

Explanation:

https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/use-case-configure-firewalls-using-panorama/set-up-your-centralized-configuration-and-policies/add-the-managed-firewalls-and-deploy-updates