exam questions

Exam PCNSA All Questions

View all questions & answers for the PCNSA exam

Exam PCNSA topic 1 question 126 discussion

Actual exam question from Palo Alto Networks's PCNSA
Question #: 126
Topic #: 1
[All PCNSA Questions]

An administrator would like to see the traffic that matches the interzone-default rule in the traffic logs.
What is the correct process to enable this logging?

  • A. Select the interzone-default rule and click Override; on the Actions tab, select Log at Session End and click OK.
  • B. Select the interzone-default rule and edit the rule; on the Actions tab, select Log at Session End and click OK.
  • C. Select the interzone-default rule and edit the rule; on the Actions tab, select Log at Session Start and click OK.
  • D. This rule has traffic logging enabled by default; no further action is required.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
AG15808
Highly Voted 3 years, 3 months ago
A is the correct answer. You must select "Override" and A is the only answer that meets this requirement.
upvoted 9 times
...
H3kerman
Highly Voted 3 years, 5 months ago
Selected Answer: A
The default rules are predefined rules that are part of the predefined configuration and are read-only by default; you can override them and change a limited number of settings, including the tags, action (allow or deny), log settings, and security profiles. The names for the two default rules are intrazone-default and interzone-default.
upvoted 5 times
...
Postlalonde
Most Recent 9 months, 3 weeks ago
Selected Answer: A
It should be A as you need to click "Override" First to edit a default rule.
upvoted 1 times
...
cjace
11 months, 2 weeks ago
The correct answer is A. Select the interzone-default rule and click Override; on the Actions tab, select Log at Session End and click OK. In Palo Alto PAN-OS, the interzone-default rule is a pre-defined rule that cannot be edited directly. However, you can override this rule to change its actions.
upvoted 1 times
...
mr_flubber
2 years ago
Selected Answer: A
It's A, override is necessary.
upvoted 2 times
...
Adilon
2 years ago
override for sure
upvoted 1 times
...
all_nicknames_are_taken
2 years, 2 months ago
A: https://docs.paloaltonetworks.com/best-practices/9-1/data-center-best-practices/data-center-best-practice-security-policy/log-and-monitor-data-center-traffic/log-data-center-traffic-that-matches-no-interzone-rules
upvoted 2 times
...
BeforeScope
2 years, 3 months ago
Selected Answer: A
Override
upvoted 1 times
...
Chance101
2 years, 4 months ago
Selected Answer: A
tis A boom shacka lacka
upvoted 1 times
...
Spaz_6
2 years, 4 months ago
Selected Answer: A
The default policy can only be modified with override option.
upvoted 1 times
...
TheMaster01
2 years, 7 months ago
Selected Answer: A
Default rules are not modifiable unless you over ride them
upvoted 3 times
...
z8d21oczd
2 years, 9 months ago
Selected Answer: A
A it is. Tested and verified
upvoted 1 times
...
kewokil120
2 years, 11 months ago
Selected Answer: A
A is correct answer. You need to override.
upvoted 1 times
...
bnsrikar
2 years, 11 months ago
A is correct answer. You need to override. Default rules cannot be modified
upvoted 2 times
...
LordScorpius
3 years, 1 month ago
Selected Answer: A
Default rules and profiles require Override and, of course, best practice, log at end.
upvoted 2 times
...
error_909
3 years, 1 month ago
Selected Answer: A
A. Select the interzone-default rule and click Override; on the Actions tab, select Log at Session End and click OK.
upvoted 3 times
...
LuisRG17
3 years, 4 months ago
Selected Answer: A
A is correct
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago