Exam PCNSA topic 1 question 15 discussion

'B' is correct answer according PCNSA Study Guide 2020, p.131 After a packet has been allowed by the Security policy, Security Profiles are used to scan packets for threats, vulnerabilities, viruses, spyware, malicious URLs, data exfiltration, and exploitation software.

B is the correct answer, the security policy has to allow the traffic for the security profile to take action

No reason to scan if the traffic is blocked. Must be allowed for security profile to take effect

Security Profiles are not used in the match criteria of a traffic flow. The Security Profile is applied to scan traffic after the application or category is allowed by the Security policy rule.

I believe that is a 'B' is correct, and "D" not is the correct. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/policy/security-profiles "Security Profiles are not used in the match criteria of a traffic flow. The Security Profile is applied to scan traffic after the application or category is allowed by the Security policy rule."

you dont put security profiles on a security policy that denies traffic

t's B. D is wrong, the Profile can only take actions if the traffic is allowed by the security policy rule.

Of course B

"B" is the Correct, as it is shown in the PCNSE exam questions.

B is correct answer.

B: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/policy/security-profiles

Security policy rules allow or block traffic in network, while security profiles scans the applications for threats, such as viruses, malware, spyware, and DDOS attacks. So the answer B is correct as the traffic will need to be allowed first for security profiles scans

Definitely C!, if the security rule blocks the traffic it will never make it to the security profiles

B is correct. Remember the Security Policy at the end of the Policy must be set to Allow, then you can add additional policies to check prior to allowing the traffic.

B is the correct answer

Of course is B the right answer. Took the PAN-EDU-210 a few weeks ago the course material says so as well as -> https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/security-profiles While security policy rules enable you to allow or block traffic on your network, security profiles help you define an allow but scan rule, which scans allowed applications for threats, such as viruses, malware, spyware, and DDOS attacks. When traffic matches the allow rule defined in the security policy, the security profile(s) that are attached to the rule are applied for further content inspection rules such as antivirus checks and data filtering.

B is correct