Exam PCNSA topic 1 question 205 discussion

c is the correct answer

The Test Security Policy Match window enables you to enter a set of criteria directly from the web interface rather than from the CLI. After a test is executed, the criteria are evaluated against the current Security policy rules to determine if the simulated traffic matches an ex isting policy. After running the policy match and connectivity tests in the web interface, you can quickly and easily test connectivity to ensure that policy rules allow or deny the correct traffic, and t hose devices can connect to network resources such as WildFire ® or Log Collectors [Palo Alto Networks]

commands to verify that your policies are working as expected https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-cli-quick-start/use-the-cli/test-the-configuration/test-policy-matches

Test the policy rules in your running configuration to ensure that your policies appropriately allow and deny traffic and access to applications and websites in compliance with your business needs and requirements. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/test-policy-rule-traffic-matches