exam questions

Exam PCNSA All Questions

View all questions & answers for the PCNSA exam

Exam PCNSA topic 1 question 133 discussion

Actual exam question from Palo Alto Networks's PCNSA
Question #: 133
Topic #: 1
[All PCNSA Questions]

Assume that traffic matches a Security policy rule but the attached Security Profiles is configured to block matching traffic.
Which statement accurately describes how the firewall will apply an action to matching traffic?

  • A. If it is a block rule, then Security Profile action is applied last.
  • B. If it is an allow rule, then the Security policy rule is applied last.
  • C. If it is a block rule, then the Security policy rule action is applied last.
  • D. If it is an allowed rule, then the Security Profile action is applied last.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
H3kerman
Highly Voted 1 year, 8 months ago
Selected Answer: D
Security Profiles are added to the end of Security policy rules. After a packet has been allowed by the Security policy
upvoted 12 times
drogadotcom
3 months, 1 week ago
That is true, Security profiles are applied only after a Security policy allow match; if the traffic is for example dropped they will not match Security profiles.
upvoted 4 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago